https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:17:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354485 EUVD-2026-354485 https://cve.radiocsirt.org/vuln/euvd-2026-354485 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73061 <p>Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.</p> <p>Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73061 https://cve.radiocsirt.org/vuln/ghsa-4279-f6cf-4g7r <p>Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.</p> <p>Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.</p> https://cve.radiocsirt.org/vuln/ghsa-4279-f6cf-4g7r