Publish Advisories

GHSA-m2p3-hwv5-xpqw
GHSA-xw6w-9jjh-p9cr
GHSA-6q7j-xr26-3h2c

Author: advisory-database[bot]

advisories/github-reviewed/2026/03/GHSA-m2p3-hwv5-xpqw/GHSA-m2p3-hwv5-xpqw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m2p3-hwv5-xpqw",
-  "modified": "2026-03-24T22:15:43Z",
+  "modified": "2026-07-06T13:09:51Z",
   "published": "2026-03-24T22:15:43Z",
   "aliases": [],
   "summary": "Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString",
@@ -31,6 +31,25 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": "Scriban.Signed"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.0.0"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [

advisories/github-reviewed/2026/03/GHSA-xw6w-9jjh-p9cr/GHSA-xw6w-9jjh-p9cr.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xw6w-9jjh-p9cr",
-  "modified": "2026-03-24T22:16:01Z",
+  "modified": "2026-07-06T13:10:09Z",
   "published": "2026-03-24T22:16:01Z",
   "aliases": [],
   "summary": "Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation",
@@ -31,6 +31,25 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": "Scriban.Signed"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.0.0"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [

advisories/github-reviewed/2026/06/GHSA-6q7j-xr26-3h2c/GHSA-6q7j-xr26-3h2c.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6q7j-xr26-3h2c",
-  "modified": "2026-06-26T21:02:14Z",
+  "modified": "2026-07-06T13:10:56Z",
   "published": "2026-06-26T21:02:14Z",
   "aliases": [],
   "summary": "Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)",
@@ -34,6 +34,28 @@
       "database_specific": {
         "last_known_affected_version_range": "<= 7.2.0"
       }
+    },
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": "Scriban.Signed"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "6.6.0"
+            },
+            {
+              "fixed": "7.2.1"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 7.2.0"
+      }
     }
   ],
   "references": [