Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the Expressi...
CVE-2026-74795
CVE-2026-74795 影响 Scriban 6.6.0 之前的版本。Scriban 是一个常用于 .NET 环境的轻量级模板引擎。该漏洞源于其递归下降解析器未对模板表达式的嵌套深度进行默认限制（ParserOptions 中的 Ex