NuGet/Scriban.Signed CVE-2026-74792: high 7.5, EPSS 0.53%
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Action: Upgrade Scriban.Signed to 7.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.0 | - |
Fixed versions
| 7.0.0 |
Sources
- osv: GHSA-p6q4-fgr8-vx4p#NuGet/Scriban.Signed
- https://github.com/scriban/scriban/security/advisories/GHSA-p6q4-fgr8-vx4p
- https://github.com/advisories/GHSA-wgh7-7m3c-fx25
- https://github.com/scriban/scriban
CVE-2026-74792 · published · modified · JSON