CVE-2026-74784
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 16, 2026
Vendor
unknown
Description
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process in under a second.