{"action":"Upgrade Scriban.Signed to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"0"}],"component":"Scriban.Signed","cve_ids":["CVE-2026-74786"],"ecosystem":"NuGet","epss":0.00476,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-m2p3-hwv5-xpqw","id":"tcs_01M5N8TBM1NADDR2YHHG8DFMB4","modified_at":"2026-08-17T03:55:59.220548628Z","published_at":"2026-03-24T22:15:43Z","references":["https://osv.dev/vulnerability/GHSA-m2p3-hwv5-xpqw","https://github.com/scriban/scriban/security/advisories/GHSA-m2p3-hwv5-xpqw","https://github.com/scriban/scriban"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-m2p3-hwv5-xpqw#NuGet/Scriban.Signed","url":"https://osv.dev/vulnerability/GHSA-m2p3-hwv5-xpqw"}],"summary":"Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString"}