CVE-2026-124439

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.5.3 Scriban.Signed versions prior to 7.5.3

Description Uncontrolled recursion flaws exist where postfix member, indexer, and call chains bypass ExpressionDepthLimit, array comparison lacks depth and cycle checks, and object.eval bypasses RecursiveLimit. Attackers capable of supplying templates can trigger an uncatchable StackOverflowException, which results in the termination of the host process.

Recommendations Update Scriban to version 7.5.3 or later. Update Scriban.Signed to version 7.5.3 or later.