Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

giskard-agents

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 high
Weekly downloads
3,065
Dependents
3
Registry
PyPI

Advisories 1

  • Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment

    Affected: fixed in 0.3.4; from 1.0.1a1, fixed in 1.0.2b1; fixed in 0.3.4; from 1.0.1a1, fixed in 1.0.2b1.