Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attackers who can supply templates can cause out-of-memory exceptions or CPU exhaustion, typically terminating the entire host process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-74785 Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string … https://www.cve.org/CVERecord?id=CVE-2026-74785
Post summary
The tweet announces CVE-2026-74785, noting three DoS vulnerabilities in Scriban versions prior to 7.0.0 that bypass safety controls via unbounded string.
🚨*CVE* CVE-2026-74785 Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string … https://www.cve.org/CVERecord?id=CVE-2026-74785 ----- Traducción: CVE-2026-74785 Scr… https://infoflow.cloud`
Post summary
The post announces CVE‑2026‑74785, detailing three denial‑of‑service flaws in Scriban prior to v7.0.0 that allow bypass of safety checks via unbounded string evaluation.