scriban CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH scriban CVE published 2026-08-16

CVE-2026-73060

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-16T14:16:55.640Z and has not been modified since then. The NVD entry is currently Deferred. Organizations and developers using Scriban versions 3.0.0 through 7.2.5 should be aware of the denial of service vulnerability in the ScriptRange.Multiply operator, which allows attackers to bypass LoopLimit [truncated]