CVE-2026-73062 - Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication
Brief
CVE ID : CVE-2026-73062
Published : Aug. 16, 2026, 2:16 p. m.
- 6 hours, 50 minutes ago
Description : Scriban versions 3.
- 0 through 7.
- 0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory allocations, causing resource exhaustion and availability degradation.
Severity: 7.5
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...