giskard-checks vulnerabilities
CVEs whose affected-version data names the giskard-checks package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-40319Medium· 5.5Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check
Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check
▾ Sunlitgiskard-checks · giskard-checksEPSS 0.15%via OSV
CVE-2026-40320High· 7.8Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck
Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck
▾ Twilightgiskard-checks · giskard-checksEPSS 0.14%via OSV