VULNERABILITY INTELLIGENCE
CVE-2026-74784
EPSS probability0.45%
CISA KEVNot currently listed
Published2026-08-16
Last modified2026-08-31
Description
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process in under a second.
Weakness classification
- disclosure@vulncheck.com: CWE-770