CVE-2026-74788 | Scriban up to 6.6.0 String Padding Functions string.pad_left/string.pad_right width denial of service

A vulnerability marked as problematic has been reported in Scriban up to 6.6.0. Affected by this vulnerability is the function string.pad_left/string.pad_right of the component String Padding Functions. This manipulation of the argument width causes denial of service.

This vulnerability is handled as CVE-2026-74788. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More