Security Advisory

CVE-2026-74791

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-16 13:14:15

Last updated 2026-08-17 17:41:05

Assigner VulnCheck

CVSS score not scored

State PUBLISHED

Description

Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.

← Browse all CVEs View on cve.org ↗