CyberRota Analysis
AI-GeneratedScriban versions prior to 7.0.0 are vulnerable due to an uncontrolled memory allocation issue in the string.pad_left and string.pad_right functions, which fail to validate the width parameter. This flaw allows attackers to exploit untrusted template input, potentially causing excessive memory allocation and resulting in denial of service through OutOfMemoryExceptions. Organizations using affected Scriban versions should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes Scriban to untrusted template input, an attacker can supply an arbitrarily large width value (e.g., 500,000,000) to trigger ~1GB memory allocations in a single call, resulting in OutOfMemoryException and denial of service. The TemplateContext.LimitToString limit does not prevent this because it is only enforced after the string has been fully allocated.