Skip to content
OpenAdvisories

Package · PyPI

giskard-checks

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2026-40320

    Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheck

    Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check def…

    Giskard-AI giskard-oss giskard-checks PyPI
  • Low 1.0
    CVE-2026-40319

    Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

    Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search() without any timeout or complexity guard. A crafted regex patter…

    Giskard-AI giskard-oss giskard-checks PyPI