Skip to content
OpenAdvisories

Package · NuGet

scriban

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-74790

    Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache

    Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a Template…

    scriban scriban scriban Scriban.Signed NuGet
  • Critical 9.8
    CVE-2026-73061

    Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor

    Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setter…

    scriban scriban scriban NuGet