CVE-2026-40319

MediumCVSS 5.5

Published: 17/04/2026(UTC)Updated: 25/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

In Giskard, an open-source AI testing framework, versions prior to 1.0.2b1 pass a user-supplied regex pattern directly to re.search() without timeout or complexity guard. A crafted pattern can trigger catastrophic backtracking and hang the process; exploitation requires write access to a check definition.

Risk Assessment

An attacker with write access could hang the test process, causing denial of service in CI/CD or testing environments.

Recommendation

Update giskard-checks to version 1.0.2b1 or later.

Other vulnerabilities in Giskard

CVE-2026-34172High
Giskard before versions 0.3.4 and 1.0.2b1 in the ChatWorkflow.chat(message) method passes its string argument directly as a Jinja2 template source to a non-sandboxed environment, enabling remote code execution via Jinja2 class traversal.

Original NVD description (English source)

Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search() without any timeout or complexity guard. A crafted regex pattern can trigger catastrophic backtracking, causing the process to hang indefinitely. Exploitation requires write access to a check definition and subsequent execution of the test suite. This issue has been fixed in giskard-checks version 1.0.2b1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS