Description
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory allocations, causing resource exhaustion and availability degradation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| scriban | scriban | 3.0.0 – ≤ 7.2.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Scriban | >= 3.0.0, < 7.2.1 | 7.2.1 | GHSA-q6rr-fm2g-g5x8 |
| NuGet | Scriban.Signed | >= 3.0.0, < 7.2.1 | 7.2.1 | GHSA-q6rr-fm2g-g5x8 |
References
- GitHub Security Advisory (GHSA-q6rr-fm2g-g5x8) vendor-advisory
- VulnCheck Advisory: Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication third-party-advisory