Giskard vulnerabilities
We track 2 vulnerabilities in Giskard products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Giskard vulnerabilities
- 7.8 High severity
giskard-oss: Improper Neutralization of Special Elements Used in a Template Engine
Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check defi
- 8.8 High severity
giskard-oss: Improper Neutralization of Special Elements Used in a Template Engine
Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who