{"id":"EUVD-2026-59947","enisaUuid":"cc52453f-715b-381e-8106-e23ce1c55a85","description":"Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.","datePublished":"Aug 16, 2026, 1:14:07 PM","dateUpdated":"Oct 8, 2026, 3:24:38 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/scriban/scriban/security/advisories/GHSA-7jvp-hj45-2f2m\nhttps://www.vulncheck.com/advisories/scriban-before-arbitrary-property-write-via-typedobjectaccessor\n","aliases":"CVE-2026-73061\nGHSA-4279-f6cf-4g7r\n","assigner":"VulnCheck","epss":0.38,"enisaIdProduct":[{"id":"85395be4-8f4e-3402-a651-09fa2b04e16d","product":{"name":"scriban","vendor":{"name":"scriban"}},"product_version":"0 \u003c7.2.2"}],"enisaIdVendor":[{"id":"7135d2b1-291a-31a1-8e8a-24687dd8163a","vendor":{"name":"scriban"}}],"enisaIdVulnerability":[{"id":"335b92c8-ef69-35b5-967f-3a26601b661a","vulnerability":{"id":"GHSA-4279-f6cf-4g7r","description":"Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.","datePublished":"Aug 16, 2026, 3:30:25 PM","dateUpdated":"Aug 16, 2026, 3:30:25 PM","baseScore":0.0,"references":"https://github.com/scriban/scriban/security/advisories/GHSA-7jvp-hj45-2f2m\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-73061\nhttps://www.vulncheck.com/advisories/scriban-before-arbitrary-property-write-via-typedobjectaccessor\n","enisa_id":"EUVD-2026-59947\n","aliases":"GHSA-4279-f6cf-4g7r\nCVE-2026-73061\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ce7b889f-c0c5-3140-9596-23aef982ca0e","vulnerability":{"id":"CVE-2026-73061","description":"Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on public-setter properties, permanently altering live host objects after template rendering.","datePublished":"Aug 16, 2026, 1:14:07 PM","dateUpdated":"Oct 8, 2026, 3:24:38 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/scriban/scriban/security/advisories/GHSA-7jvp-hj45-2f2m\nhttps://www.vulncheck.com/advisories/scriban-before-arbitrary-property-write-via-typedobjectaccessor\n","enisa_id":"EUVD-2026-59947\n","assigner":"VulnCheck","epss":0.38,"dataProcessed":"Oct 30, 2026, 7:14:39 AM","vulnerabilityProduct":[{"id":"e8db52e4-c594-319a-95c8-95a9a928e63e","product":{"name":"scriban","vendor":{"name":"scriban"}},"product_version":"0 \u003c7.2.2"}],"vulnerabilityVendor":[{"id":"07d457b8-d606-3784-8925-ebe7ba2de923","vendor":{"name":"scriban"}}]}}],"enisaIdAdvisory":[]}