giskard-oss vulnerabilities

2 known vulnerabilities in giskard-oss from Giskard-AI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  giskard-oss: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-40320Apr 17, 2026Giskard-AI

  Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check defi

• 8.8 High severity

  giskard-oss: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-34172Mar 31, 2026Giskard-AI

  Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who