p PatchFirst

CVE-2024-52524

CVE-2024-52524 · ReDoS in Giskard Scan text perturbation

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datasets with specific text patterns with Giskard detectors, this vulnerability could trigger exponential regex evaluation times, potentially leading to denial of service. Giskard versions prior to 2.15.5 are affected.

CVSS 6.9 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • giskard

    Versions
    • < 2.15.5: Affected

    No fix published

  • giskard PyPI

    Versions
    • 0.1.2
    • 1.0.0
    • 1.0.0a1
    • 1.0.0a2
    • 1.1.0
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.4.0
    • 1.5.0
    • 1.6.0
    • 1.7.0
    • 1.7.0a1
    • 1.7.0a2
    • 1.7.0a3
    • 1.7.0a4
    • 1.7.0a5
    • 1.7.0a6
    • 1.7.0a7
    • 1.7.1
    • 1.7.2
    • 1.7.3
    • 1.8.0
    • 1.9.0
    • 1.9.1
    • 1.9.3
    • 1.9.4
    • 2.0.0
    • 2.0.0b1
    • 2.0.0b10
    • 2.0.0b11
    • 2.0.0b12
    • 2.0.0b13
    • 2.0.0b14
    • 2.0.0b16
    • 2.0.0b17
    • 2.0.0b18
    • 2.0.0b19
    • 2.0.0b2
    • 2.0.0b20
    • 2.0.0b22
    • 2.0.0b25
    • 2.0.0b26
    • 2.0.0b27
    • 2.0.0b28
    • 2.0.0b29
    • 2.0.0b3
    • 2.0.0b30
    • 2.0.0b31
    • 2.0.0b32
    • 2.0.0b33
    • 2.0.0b34
    • 2.0.0b4
    • 2.0.0b5
    • 2.0.0b6
    • 2.0.0b7
    • 2.0.0b8
    • 2.0.0b9
    • 2.0.1
    • 2.0.2
    • 2.0.3
    • 2.0.4
    • 2.0.5
    • 2.0.6
    • 2.0.7
    • 2.1.1
    • 2.1.2
    • 2.1.3
    • 2.10.0
    • 2.11.0
    • 2.12.0
    • 2.13.0
    • 2.14.0
    • 2.14.1
    • 2.14.2
    • 2.14.3
    • 2.14.4
    • 2.14.5
    • 2.14.6
    • 2.15.0
    • 2.15.1
    • 2.15.2
    • 2.15.3
    • 2.15.4
    • 2.2.0
    • 2.3.1
    • 2.3.2
    • 2.4.0
    • 2.5.0
    • 2.5.1
    • 2.5.2
    • 2.5.3
    • 2.6.0
    • 2.7.0
    • 2.7.1
    • 2.7.2
    • 2.7.3
    • 2.7.4
    • 2.7.5
    • 2.7.6
    • 2.7.7
    • 2.8.0
    • 2.9.0
    • 2.9.1
    Affected ranges
    • ECOSYSTEM: < 2.15.5

    Update to 2.15.5

Original sources

Check your server →