diff --git a/advisories/github-reviewed/2026/06/GHSA-q6rr-fm2g-g5x8/GHSA-q6rr-fm2g-g5x8.json b/advisories/github-reviewed/2026/06/GHSA-q6rr-fm2g-g5x8/GHSA-q6rr-fm2g-g5x8.json index b394682cf6479..8305aff86f64c 100644 --- a/advisories/github-reviewed/2026/06/GHSA-q6rr-fm2g-g5x8/GHSA-q6rr-fm2g-g5x8.json +++ b/advisories/github-reviewed/2026/06/GHSA-q6rr-fm2g-g5x8/GHSA-q6rr-fm2g-g5x8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q6rr-fm2g-g5x8", - "modified": "2026-06-26T21:01:57Z", + "modified": "2026-06-26T21:02:00Z", "published": "2026-06-26T21:01:57Z", "aliases": [], "summary": "Scriban: array * int (ScriptArray.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx", @@ -9,7 +9,7 @@ "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ @@ -34,6 +34,28 @@ "database_specific": { "last_known_affected_version_range": "<= 7.2.0" } + }, + { + "package": { + "ecosystem": "NuGet", + "name": "Scriban.Signed" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "7.2.1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 7.2.0" + } } ], "references": [