{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ascribanscriban/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:scriban:scriban:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-124439"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Scriban (\u003c 7.5.3)","Scriban.Signed (\u003c 7.5.3)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Scriban"],"content_html":"\u003cp\u003eScriban and Scriban.Signed versions prior to 7.5.3 contain uncontrolled recursion vulnerabilities. Specific flaws include postfix member, indexer, and call chains that bypass the configured \u003ccode\u003eExpressionDepthLimit\u003c/code\u003e, as well as missing depth and cycle checks in array comparisons and \u003ccode\u003eobject.eval\u003c/code\u003e calls. Successful exploitation allows an attacker who can supply templates to trigger an uncatchable \u003ccode\u003eStackOverflowException\u003c/code\u003e, resulting in a denial-of-service by crashing the host process.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in the immediate termination of the host process, leading to a denial-of-service for any application utilizing the affected Scriban template engine.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Scriban and Scriban.Signed to version 7.5.3 or later.\u003c/li\u003e\n\u003cli\u003eAudit applications that process user-supplied templates to ensure templates originate from trusted sources.\u003c/li\u003e\n\u003cli\u003eMonitor logs for repeated \u003ccode\u003eStackOverflowException\u003c/code\u003e errors within .NET applications that process user templates.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T15:31:02Z","date_published":"2026-11-08T15:31:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-scriban-recursion-dos/","summary":"Scriban and Scriban.Signed versions prior to 7.5.3 are vulnerable to uncontrolled recursion, allowing an attacker to trigger a process-terminating StackOverflowException via malicious templates.","title":"Scriban: Uncontrolled recursion denial-of-service (CVE-2026-124439)","url":"https://feed.craftedsignal.io/briefs/2026-11-scriban-recursion-dos/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:scriban:scriban:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-124437"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Scriban (\u003c 7.5.3)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Scriban"],"content_html":"\u003cp\u003eScriban versions prior to 7.5.3 contain a resource exhaustion vulnerability. Built-in functions, specifically math.format, regex.replace, and string.escape, fail to adhere to the LimitToString allocation guard. By supplying templates with specific structures, such as high-precision specifiers, large array comparisons, or specific mathematical operations, an attacker can bypass LoopLimit and CancellationToken mechanisms. This triggers excessive CPU and memory consumption, leading to potential crashing or stalling of host processes in multi-tenant environments.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for denial-of-service against the host process, potentially disrupting services for all tenants on the shared host.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Scriban to version 7.5.3 or later immediately to apply the corrected allocation guards.\u003c/li\u003e\n\u003cli\u003eReview all user-provided templates for usage of high-precision math functions, regex operations, or complex array manipulations if an immediate upgrade is not feasible.\u003c/li\u003e\n\u003cli\u003eMonitor host memory and CPU utilization metrics for application processes utilizing the Scriban library to identify potential resource spikes indicative of template-based exploitation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T15:30:43Z","date_published":"2026-11-08T15:30:43Z","id":"https://feed.craftedsignal.io/briefs/2026-11-08-scriban-resource-exhaustion/","summary":"Scriban versions prior to 7.5.3 are vulnerable to resource exhaustion because specific built-in functions bypass memory and CPU allocation limits, allowing malicious templates to cause denial-of-service in multi-tenant environments.","title":"Scriban: Resource exhaustion via template builtins (CVE-2026-124437)","url":"https://feed.craftedsignal.io/briefs/2026-11-08-scriban-resource-exhaustion/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:scriban:scriban:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}