CVE-2026-73062
2 advisories.
NuGet/Scriban CVE-2026-73062: medium
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
Action: Upgrade Scriban to 7.2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 7.2.1 | - |
Fixed versions
| 7.2.1 |
Sources
- osv: GHSA-q6rr-fm2g-g5x8
- https://github.com/scriban/scriban/security/advisories/GHSA-q6rr-fm2g-g5x8
- https://github.com/scriban/scriban
CVE-2026-73062 · published · modified · JSON
NuGet/Scriban.Signed CVE-2026-73062: medium
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
Action: Upgrade Scriban.Signed to 7.2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 7.2.1 | - |
Fixed versions
| 7.2.1 |
Sources
- osv: GHSA-q6rr-fm2g-g5x8#NuGet/Scriban.Signed
- https://github.com/scriban/scriban/security/advisories/GHSA-q6rr-fm2g-g5x8
- https://github.com/scriban/scriban
CVE-2026-73062 · published · modified · JSON