Vulnerabilities & PatchesEmerging1 src
CVE-2026-73062 - Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication
CVE ID : CVE-2026-73062
Published : Aug. 16, 2026, 2:16 p. m.
• 6 hours, 50 minutes ago
Description : Scriban versions 3. 0. 0 through 7. 2. 0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory allocations, causing resource exhaustion and availability degradation.
Severity: 7.5
• HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...