Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-74783 · Microsoft / collected KEV context

EUVD-2026-59949

GHSA-jg4x-p32p-q6xr

GHSA-6q7j-xr26-3h2c

cve-program · CVE-2026-74783

• https://github.com/scriban/scriban/security/advisories/GHSA-6q7j-xr26-3h2c
• https://www.vulncheck.com/advisories/scriban-through-parser-recursion-denial-of-service

euvd · EUVD-2026-59949

• https://github.com/scriban/scriban/security/advisories/GHSA-6q7j-xr26-3h2c
• https://www.vulncheck.com/advisories/scriban-through-parser-recursion-denial-of-service

nvd · CVE-2026-74783

• https://github.com/scriban/scriban/security/advisories/GHSA-6q7j-xr26-3h2c
• https://www.vulncheck.com/advisories/scriban-through-parser-recursion-denial-of-service

osv · GHSA-6q7j-xr26-3h2c

• https://github.com/scriban/scriban/security/advisories/GHSA-6q7j-xr26-3h2c
• https://github.com/scriban/scriban

No related operational record is retained in the current change model.