Vulnerabilities & PatchesEmerging1 src
CVE-2026-74787 - Scriban before 7.0.0 Uncontrolled Recursion via object.to_json
CVE ID : CVE-2026-74787
Published : Aug. 16, 2026, 2:16 p. m.
• 6 hours, 50 minutes ago
Description : Scriban before 7. 0. 0 contains an uncontrolled recursion vulnerability in the object. to_json builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that fatally terminates the hosting . NET process.
Severity: 7.5
• HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...