CyberRota Analysis
AI-GeneratedScriban versions prior to 7.2.0 are vulnerable to a denial of service attack due to the array.insert_at function, which allows for unbounded null entry allocation. By supplying a large index parameter, an attacker can quickly trigger an OutOfMemoryException, leading to a crash of the host process. Organizations using affected versions should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process in under a second.