CVE-2026-73062

Name of the Vulnerable Software and Affected Versions Scriban versions 3.0.0 through 7.2.0

Description A denial of service issue exists in the array multiplication operator. The system allocates memory without enforcing LoopLimit or using overflow-safe arithmetic checks. An attacker can provide a large integer multiplier within a template to trigger multi-gigabyte memory allocations, leading to resource exhaustion and degradation of service availability.

Recommendations Update Scriban to a version later than 7.2.0.