What is CVE-2026-74783?
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit vulnerability leading to stack overflow via deeply nested expressions. Attackers can exploit this by supplying templates with excessive parentheses, arrays, or object initializers. Users should immediately update to the latest patched version.
Azərbaycanca: Scriban 6.6.0 - 7.2.0 versiyalarında ExpressionDepthLimit mühafizəsinin zəifliyi aşkarlanıb. Bu qüsur dərin nested ifadələrin (məsələn, mötərizələr, massivlər) rekursiv parsing zamanı stack overflow-a səbəb olur. İstifadəçilərə təcili olaraq son versiyaya yeniləmə tövsiyə edilir.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
Which versions of Scriban are affected by CVE-2026-74783?
This vulnerability affects Scriban versions 6.6.0 through 7.2.0.
How can CVE-2026-74783 be exploited?
Attackers can exploit this vulnerability by supplying templates with excessive parentheses, arrays, or object initializers that create deeply nested expressions.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.