{"data":{"id":"062010b5-0d2d-47de-bef4-dcb760a47c7d","title":"GHSA-rq2q-4r55-9877: Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check","summary":"The RegexMatching check in the giskard-checks package passes a user-supplied pattern directly to re.search() in text_matching.py (line 457), with no timeout, complexity guard, or pattern validation. An attacker who controls the pattern or the matched text can trigger catastrophic backtracking, hanging the process and denying service, though exploitation requires write access to a check definition and execution of the test suite.","solution":"Upgrade to giskard-checks >= 1.0.2b1.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-rq2q-4r55-9877","publishedAt":"2026-04-14T23:13:39.000Z","cveId":"CVE-2026-40319","cweIds":null,"cvssScore":null,"cvssSeverity":"low","severity":"low","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["giskard-checks@<= 1.0.1b1 (fixed: 1.0.2b1)"],"affectedPackageNames":["giskard-checks"],"affectedPackageRefs":["pypi:giskard-checks"],"affectedVendors":[],"affectedVendorsRaw":["giskard-checks","Giskard"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00158,"epssCheckedAt":"2026-10-16T06:09:02.253Z","kevDateAdded":null,"advisoryAliases":["GHSA-rq2q-4r55-9877"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-14T23:13:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}