Skip to content
OpenAdvisories

Package · PyPI

giskard-checks

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheck

    Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check def…