{"action":"Upgrade Scriban to 7.2.1 or later.","affected":[{"fixed":"7.2.1","introduced":"3.0.0"}],"component":"Scriban","cve_ids":["CVE-2026-73062"],"ecosystem":"NuGet","epss":0.00488,"exploited":false,"fixed_versions":["7.2.1"],"ghsa_id":"GHSA-q6rr-fm2g-g5x8","id":"tcs_01M5N8XM11XWN346AM18FZ42BM","modified_at":"2026-08-17T03:55:59.577222843Z","published_at":"2026-06-26T21:01:57Z","references":["https://osv.dev/vulnerability/GHSA-q6rr-fm2g-g5x8","https://github.com/scriban/scriban/security/advisories/GHSA-q6rr-fm2g-g5x8","https://github.com/scriban/scriban"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q6rr-fm2g-g5x8","url":"https://osv.dev/vulnerability/GHSA-q6rr-fm2g-g5x8"}],"summary":"Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx"}