Skip to content
OpenAdvisories

Vendor

Giskard-AI

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.4

    Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheck

    Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check def…

  • Medium 6.9

    ReDoS in Giskard Scan text perturbation

    Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datasets with specific text patterns with Giskard detectors, this…