Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent...
CVE-2026-74795
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does n
#advisory
共收录 23530 条相关情报。
← 返回所有主题Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the...
CVE-2026-74794
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit prop
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in...
CVE-2026-74792
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer pa
OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during...
CVE-2026-74796
OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attack
Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop...
CVE-2026-74789
Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expe
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset()...
CVE-2026-74791
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cach
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init...
CVE-2026-74797
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing malic
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function...
CVE-2026-74784
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in...
CVE-2026-74786
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression...
CVE-2026-74785
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass exis
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json...
CVE-2026-74787
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that...
CVE-2026-74783
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive des
Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation...
CVE-2026-74788
Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code t
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array...
CVE-2026-73062
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that
stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route...
CVE-2026-73059
stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChann
Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the...
CVE-2026-73060
Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication...
CVE-2026-73056
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability i
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0...
CVE-2026-19349
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl a
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5...
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a