Skip to content
OpenAdvisories

Package · PyPI

giskard-checks

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.0
    CVE-2026-40319

    Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

    Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search() without any timeout or complexity guard. A crafted regex patter…

    Giskard-AI giskard-oss giskard-checks PyPI