Add CVE-2026-73060 to GHSA-89cf-6hmv-8rxm
Nobody has claimed this yet.
Assessment
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Newbie friendliness
- 65/100
Research direction
Open GHSA-89cf-6hmv-8rxm in the GitHub Security advisories for scriban and review its existing CVE details. Add CVE-2026-73060 to that advisory; verify it is associated with the advisory so GitHub can match the imported record GHSA-25v3-x2wq-mm38 and Dependabot can show the full details.
Written by the indexing model from the issue text.
Description
VulnCheck assigned CVE-2026-73060 to the published advisory GHSA-89cf-6hmv-8rxm (ScriptRange.Multiply LoopLimit bypass). The CVE record links back to the advisory.
Could you add the CVE ID to the advisory?
Then GitHub can match it with the unreviewed advisory it imported from the same CVE (GHSA-25v3-x2wq-mm38), and Dependabot alerts show the advisory with full details.
Thanks!
- Dominant language
- C#
- Stars
- 4k
- Forks
- 412
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Similar issues
-
bug 優先: 低
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 92/100
-
area-ai bug untriaged
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
dotnet/extensions#7893 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
-
documentation good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 85/100