VulnSocial

CVE-2026-74792Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path (ParseArrayInitializer → ParseExpression → ParseArrayInitializer) that is not covered by the ExpressionDepthLimit counter added in the fix for GHSA-wgh7-7m3c-fx25. An attacker who can supply untrusted input to Template.Parse can trigger an uncatchable StackOverflowException that immediately terminates the process, even with the default ExpressionDepthLimit enabled.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-674

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-16: 2Technical Details · 2026-08-16: 208-16
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-74792 Scriban before 7.0.0 (affected versions &lt;= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurs… https://www.cve.org/CVERecord?id=CVE-2026-74792 ----- Traducción: CVE-2026-74792 Scr… https://infoflow.cloud`

    Post summary

    The post reports CVE-2026-74792 as a stack‑overflow flaw in Scriban <=6.6.0 caused by nested array parsing, but does not mention a PoC, exploitation, or a patch.

    0000029
    99 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-74792 Scriban before 7.0.0 (affected versions &lt;= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurs… https://www.cve.org/CVERecord?id=CVE-2026-74792

    Post summary

    CVE-2026-74792 is a stack overflow in Scriban’s nested array parsing for versions up to 6.6.0, with no active exploitation or patch details disclosed.

    000001.8K
    58.0K followersView on X

Explore more

Back to dashboard