CVE-2024-52524: ReDoS in giskard's transformation.py (GHSL-2024-324)

November 14, 2024 (updated October 31, 2025)

This vulnerability can cause extended computation times or crashes in Giskard when processing text containing certain patterns.

References

github.com/Giskard-AI/giskard
github.com/Giskard-AI/giskard/commit/48ce81f5c626171767188d6f0669498fb613b4d3
github.com/Giskard-AI/giskard/security/advisories/GHSA-pjwm-cr36-mwv3
github.com/advisories/GHSA-pjwm-cr36-mwv3
nvd.nist.gov/vuln/detail/CVE-2024-52524

Code Behaviors & Features

Detect and mitigate CVE-2024-52524 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →