CVE-2026-74785

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0

Description Three distinct denial-of-service issues exist in expression evaluation that bypass safety controls. These issues involve unbounded string multiplication, uncontrolled BigInteger shift operations, and a LoopLimit bypass via range enumeration in builtin functions. Attackers capable of supplying templates can trigger out-of-memory exceptions or CPU exhaustion, which typically results in the termination of the entire host process.

Recommendations Update to version 7.0.0 or later.