Scriban (< 7.5.3)

Scriban and Scriban.Signed versions prior to 7.5.3 are vulnerable to uncontrolled recursion, allowing an attacker to trigger a process-terminating StackOverflowException via malicious templates.

Scriban versions prior to 7.5.3 are vulnerable to resource exhaustion because specific built-in functions bypass memory and CPU allocation limits, allowing malicious templates to cause denial-of-service in multi-tenant environments.