proxy.golang.org: github.com/scriban/scriban

• Homepage:
• Documentation: https://pkg.go.dev/github.com/scriban/scriban#section-documentation
• Licenses: bsd-2-clause
• Latest release: v2.0.1+incompatible (published over 7 years ago)
• Last Synced: 2026-10-31T15:31:55.365Z (2 days ago)
• Versions: 47
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 5.506%
  • Average: 5.69%
  • Dependent repos count: 5.875%

nuget.org: scriban

Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates.

• Homepage: https://scriban.github.io/
• Licenses: BSD-2-Clause
• Latest release: 7.5.3 (published 9 days ago)
• Last Synced: 2026-11-01T13:18:30.296Z (1 day ago)
• Versions: 154
• Dependent Packages: 115
• Dependent Repositories: 0
• Downloads: 59,174,113 Total
• Rankings:
  • Downloads: 0.321%
  • Average: 10.992%
  • Dependent repos count: 13.819%
  • Dependent packages count: 18.835%
• Maintainers (1)
  • xoofx
• Advisories:
  • Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)
  • Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)
  • Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
  • Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString
  • Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
  • Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
  • Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
  • Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
  • Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
  • Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
  • Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
  • Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
  • Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)
  • Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
  • Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)

nuget.org: scriban.signed

Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates.

• Homepage: https://scriban.github.io/
• Licenses: BSD-2-Clause
• Latest release: 7.5.3 (published 9 days ago)
• Last Synced: 2026-11-01T13:18:29.961Z (1 day ago)
• Versions: 142
• Dependent Packages: 6
• Dependent Repositories: 0
• Downloads: 53,550,529 Total
• Rankings:
  • Downloads: 0.359%
  • Average: 11.004%
  • Dependent repos count: 13.819%
  • Dependent packages count: 18.835%
• Maintainers (1)
  • xoofx