Skip to content
OpenAdvisories

Vendor

Giskard-AI

4 known vulnerabilities.

Products

giskard-oss 3 giskard 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-34172

    Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment

    Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer wh…

    Giskard-AI giskard-oss giskard-agents PyPI