PyPI/giskard-checks CVE-2026-40320: high 7.8, EPSS 0.14%
Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck
Action: Upgrade giskard-checks to 1.0.2b1 or later.
pip install giskard-checks==1.0.2b1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2b1 | - |
Fixed versions
| 1.0.2b1 |
Sources
- osv: GHSA-7xjm-g8f4-rp26
- https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-7xjm-g8f4-rp26
- https://nvd.nist.gov/vuln/detail/CVE-2026-40320
- https://github.com/Giskard-AI/giskard-oss
- https://github.com/Giskard-AI/giskard-oss/releases/tag/giskard-checks%2Fv1.0.2b1
CVE-2026-40320 · published · modified · JSON