GHSA-rq2q-4r55-9877: Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Summary

The RegexMatching check in the giskard-checks package passes a user-supplied pattern directly to re.search() in text_matching.py (line 457), with no timeout, complexity guard, or pattern validation. An attacker who controls the pattern or the matched text can trigger catastrophic backtracking, hanging the process and denying service, though exploitation requires write access to a check definition and execution of the test suite.

Mitigation

Upgrade to giskard-checks >= 1.0.2b1.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• giskard-checksPyPIReaches an LLM package through dependencies · 2 tracked dependents

Related items

• MediumGHSA-hqm2-cfx2-2vgh: Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationSimilar attack · GitHub Advisory Database
• MediumGHSA-84m7-p3x7-pcfv: MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionSimilar attack · GitHub Advisory Database
• MediumCVE-2026-109311: vLLM audio upload heap overflow via FFmpeg IAMF parserSimilar attack · NVD/CVE Database
• MediumCVE-2026-108748: Quarkus LangChain4j memory exhaustion in chat-scopes WebSocketSimilar attack · NVD/CVE Database
• HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories