{"data":{"id":"e813942f-cc25-458a-8474-60bc1f968947","title":"GHSA-7xjm-g8f4-rp26: Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck","summary":"giskard-checks versions before 1.0.2b1 render the ConformityCheck rule parameter through Jinja2's default Template() constructor, so template expressions in rule definitions are evaluated at runtime. If check definitions come from an untrusted source, this can lead to arbitrary code execution, though the library is a local testing tool and exploitation requires write access to a check definition followed by a developer running the test suite.","solution":"Upgrade to giskard-checks >= 1.0.2b1. The template rendering has been removed from rule evaluation.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-7xjm-g8f4-rp26","publishedAt":"2026-04-14T23:13:52.000Z","cveId":"CVE-2026-40320","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["giskard-checks@<= 1.0.1b1 (fixed: 1.0.2b1)"],"affectedPackageNames":["giskard-checks"],"affectedPackageRefs":["pypi:giskard-checks"],"affectedVendors":[],"affectedVendorsRaw":["Giskard","giskard-checks"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00212,"epssCheckedAt":"2026-10-15T12:09:10.955Z","kevDateAdded":null,"advisoryAliases":["GHSA-7xjm-g8f4-rp26"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-14T23:13:52.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}