IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2024-11-14 18:15

MODIFIED

2024-11-21 15:15

EPSS (Prob. Exploit)

0.82%

Top 42.6%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datasets with specific text patterns with Giskard detectors, this vulnerability could trigger exponential regex evaluation times, potentially leading to denial of service. Giskard versions prior to 2.15.5 are affected.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-pjwm-cr36-mwv3 MODERATE

ReDoS in giskard's transformation.py (GHSL-2024-324)

AFFECTED PACKAGES:

PIP / giskard

<= 2.15.4

Fixed in: 2.15.5

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

ReDoS in Giskard Scan text perturbation

AFFECTED PACKAGES:

Unknown / Unknown

81 versions affected

ALIASES:

GHSA-pjwm-cr36-mwv3, PYSEC-2026-1403

> HISTORIQUE DES MODIFICATIONS

Première apparition

14/11/2024 18:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:56

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui