Loading
A lightweight library that orchestrates LLM completions and agents in parallel workflows
Declares an LLM dependency since 2025-11-04 (version 0.3.0).
Advisories that name giskard-agents as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-34172GHSA-frv4-x25r-588m: Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment | High | >= 1.0.1a1, <= 1.0.2a1 | 1.0.2b1 | 2026-03-27 |
As declared in PyPI metadata for version 1.0.4. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.