Skip to content
Threat Feed
Subscribe

Product

Scriban (3.0.0 Through 7.2.5)

1 brief RSS
critical advisory

Access-Modifier Bypass in Scriban

Scriban versions prior to 7.2.2 contain an access-modifier bypass in TypedObjectAccessor that allows unauthorized modification of private, internal, or init-only CLR object properties via template injection.

Scriban +3 vulnerability dot-net template-injection access-control sandbox-bypass cve-2026-74790 .net denial-of-service +1
3t 1c