What is GHSA-6w6f-93jg-2qf5?

GHSA-6w6f-93jg-2qf5 is a security advisory published by GitHub Security Advisories with Critical severity. Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter...

Which CVE IDs does GHSA-6w6f-93jg-2qf5 cover?

GHSA-6w6f-93jg-2qf5 covers the following CVE IDs: CVE-2026-74790. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6w6f-93jg-2qf5?

GHSA-6w6f-93jg-2qf5 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-6w6f-93jg-2qf5CriticalCVSS 9.1

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter...

Vendor

GitHub Security Advisories

Published

August 16, 2026

Last Modified

August 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-74790 →

📋 Description

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a TemplateContext after tightening its MemberFilter, bypassing sandbox policies across requests or tenants.

🔗 References (4)

https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44
https://nvd.nist.gov/vuln/detail/CVE-2026-74790
https://www.vulncheck.com/advisories/scriban-before-memberfilter-bypass-via-templatecontext-cache
https://github.com/advisories/GHSA-6w6f-93jg-2qf5