Vulnerability · Published Aug 16, 2026 · Assigned by VulnCheck

CVE-2026-74791Scriban before 7.0.0 Authorization Bypass via Stale Include Cache

High 8.6

In plain English

A high-severity security flaw in scriban from scriban. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)0.4%top 62.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
NuGet	scriban	7.0.0	GHSA-x6m9-38vm-2xhf
NuGet	scriban.signed	7.0.0	GHSA-x6m9-38vm-2xhf

Affected products (as reported)

Vendor	Product	Versions
scriban	scriban	0 – before 7.0.0

Weakness: CWE-226 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-x6m9-38vm-2xhf) vendor-advisory
VulnCheck Advisory: Scriban before 7.0.0 Authorization Bypass via Stale Include Cache third-party-advisory