Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

nuget

scriban

nuget

Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates.

View on github.com · View on nuget.org

Security Advisories for scriban in nuget

High
about 1 month ago

Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass) GSA_kwCzR0hTQS03anZwLWhqNDUtMmYybc4ABaNf

nuget Scriban
Moderate
about 2 months ago

Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p) GSA_kwCzR0hTQS02cTdqLXhyMjYtM2gyY84ABZnl

nuget Scriban
Moderate
about 2 months ago

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx GSA_kwCzR0hTQS1xNnJyLWZtMmctZzV4OM4ABZnk

nuget Scriban
High
3 months ago

Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString GSA_kwCzR0hTQS0yNGM4LTQ3OTItMjJoeM4ABXFa

nuget scriban
Moderate
5 months ago

Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation GSA_kwCzR0hTQS14dzZ3LTlqamgtcDljcs4ABUHw

nuget Scriban
Moderate
5 months ago

Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString GSA_kwCzR0hTQS1tMnAzLWh3djUteHBxd84ABUHv

nuget Scriban
High
5 months ago

Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException GSA_kwCzR0hTQS14Y3g2LXZwMzgtOGhyNc4ABUHu

nuget Scriban
High
5 months ago

Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service GSA_kwCzR0hTQS12NjZqLXg0aHctZnY5Z84ABUHt

nuget Scriban
High
5 months ago

Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service GSA_kwCzR0hTQS1jODc1LWg5ODUtaHZyY84ABUHs

nuget scriban
Critical
5 months ago

Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse GSA_kwCzR0hTQS01d3I5LW02ancteHg0NM4ABUHr

nuget scriban
High
5 months ago

Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset() GSA_kwCzR0hTQS14Nm05LTM4dm0tMnhoZs4ABUHq

nuget scriban
High
5 months ago

Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix GSA_kwCzR0hTQS1wNnE0LWZncjgtdng0cM4ABUHp

nuget Scriban
Moderate
5 months ago

Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service) GSA_kwCzR0hTQS01cnBmLXg5amctOGo1cM4ABT4b

nuget scriban
High
5 months ago

Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service) GSA_kwCzR0hTQS1ncnI5LTc0N3YteHZjcM4ABT4a

nuget scriban
High
5 months ago

Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service) GSA_kwCzR0hTQS13Z2g3LTdtM2MtZngyNc4ABT4Z

nuget scriban

Filter by Severity

High 9 Moderate 5 Critical 1