Scriban < 7.5.2 (< 7.5.2)

Scriban versions before 7.5.2 contain an information disclosure and object manipulation vulnerability that allows template authors to access .NET internals of function values through reflection member accessors.