CVE-2026-73060Published
Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.Multiply
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-73060 · Microsoft / collected KEV context
cve-program · CVE-2026-73060
- https://github.com/scriban/scriban/security/advisories/GHSA-89cf-6hmv-8rxm
- https://github.com/scriban/scriban/commit/205ca6a7c2349d3d388bd5f1f7729ee198c0d5e5
- https://github.com/scriban/scriban/commit/c3f03bfc912e14b306a01a03e611f606b05f9c33
- https://www.vulncheck.com/advisories/scriban-through-denial-of-service-via-scriptrange-multiply
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.