Advisory Database
  • Advisories
  • Dependency Scanning
  1. nuget
  2. ›
  3. scriban
  4. ›
  5. GHSA-x6m9-38vm-2xhf

GHSA-x6m9-38vm-2xhf: Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()

March 24, 2026

TemplateContext.Reset() claims that a TemplateContext can be reused safely on the same thread, but it does not clear CachedTemplates. If an application pools TemplateContext objects and uses an ITemplateLoader that resolves content per request, tenant, or user, a previously authorized include can be served to later renders without calling TemplateLoader.Load() again.

References

  • github.com/advisories/GHSA-x6m9-38vm-2xhf
  • github.com/scriban/scriban
  • github.com/scriban/scriban/security/advisories/GHSA-x6m9-38vm-2xhf

Code Behaviors & Features

Detect and mitigate GHSA-x6m9-38vm-2xhf with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 7.0.0

Fixed versions

  • 7.0.0

Solution

Upgrade to version 7.0.0 or above.

Impact 8.6 HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-226: Sensitive Information in Resource Not Removed Before Reuse

Source file

nuget/scriban/GHSA-x6m9-38vm-2xhf.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 25 Mar 2026 12:17:29 +0000.