https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:01:44.085033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379563 EUVD-2026-379563 2026-10-05T14:01:44.354025+00:00 EUVD-2026-379563 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73060 fkie_cve-2026-73060 2026-10-05T14:01:44.354071+00:00

Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left operand is a lazy sequence. Attackers can supply templates with array multiplication on lazy sequences to execute billions of uncharged iterations, pinning CPU cores and exhausting garbage collection resources even when LoopLimit is set to 1.

 https://cve.radiocsirt.org/vuln/ghsa-25v3-x2wq-mm38 GHSA-25v3-x2wq-mm38 2026-10-05T14:01:44.354121+00:00

Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left operand is a lazy sequence. Attackers can supply templates with array multiplication on lazy sequences to execute billions of uncharged iterations, pinning CPU cores and exhausting garbage collection resources even when LoopLimit is set to 1.