NuGet/scriban CVE-2026-74791: high 8.6, EPSS 0.43%

Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()

Action: Upgrade scriban to 7.0.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-x6m9-38vm-2xhf
• https://github.com/scriban/scriban/security/advisories/GHSA-x6m9-38vm-2xhf
• https://github.com/scriban/scriban

CVE-2026-74791 · published 2026-03-24T22:09:49Z · modified 2026-08-17T03:55:59.456581711Z · JSON