CVE-2026-74791 in Scriban
Resumen
por MITRE • 2026-08-16
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.