S
Vendor security profile
scriban
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical3
CISA KEV0
Public exploit12
Patch rate%7
Avg. CVSS8.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
15
0
0
CVE KEV
CVE severity distribution
15toplam CVE
Critical3 (20%)
High12 (80%)
Patch and exploitation view
%7
Verified patch
%0
CISA KEV
%80
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
8.7
CVE-2026-74795
Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion
S
Patch status unknownEPSS %1
8.7
CVE-2026-74794
Scriban before 6.6.0 Denial of Service via Infinite Recursion
S
Patch status unknownEPSS %0
8.7
CVE-2026-74792
Scriban before 7.0.0 Stack Overflow via nested array initializers
S
Patch status unknownEPSS %1
9.2
CVE-2026-74791
Scriban before 7.0.0 Authorization Bypass via Stale Include Cache
S
Patch status unknownEPSS %0
9.3
CVE-2026-74790
Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache
S
Patch status unknownEPSS %0
8.7
CVE-2026-74789
Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations
S
Patch status unknownEPSS %1
8.7
CVE-2026-74788
Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right
S
Patch status unknownEPSS %0
8.7
CVE-2026-74787
Scriban before 7.0.0 Uncontrolled Recursion via object.to_json
S
Patch status unknownEPSS %0
7.1
CVE-2026-74786
Scriban before 7.0.0 Denial of Service via Unbounded Template Output
S
Patch status unknownEPSS %0
7.1
CVE-2026-74785
Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption
S
Patch status unknownEPSS %0