{"action":"Upgrade giskard-agents to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"},{"fixed":"1.0.2b1","introduced":"1.0.1a1"}],"component":"giskard-agents","cve_ids":["CVE-2026-34172"],"ecosystem":"PyPI","epss":0.0084,"exploited":false,"fixed_versions":["0.3.4","1.0.2b1"],"ghsa_id":"GHSA-frv4-x25r-588m","id":"tcs_01M5KFG30F65T2VMK7KPY7FXZ1","modified_at":"2026-07-13T16:42:41.321155731Z","published_at":"2026-03-27T22:17:30Z","references":["https://osv.dev/vulnerability/GHSA-frv4-x25r-588m","https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-frv4-x25r-588m","https://nvd.nist.gov/vuln/detail/CVE-2026-34172","https://github.com/Giskard-AI/giskard-oss"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-frv4-x25r-588m","url":"https://osv.dev/vulnerability/GHSA-frv4-x25r-588m"}],"summary":"Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment"}