{"id":"CVE-2024-52524","aliases":["GHSA-pjwm-cr36-mwv3","PYSEC-2026-1403"],"url":"https://o3.security/vulnerability/CVE-2024-52524","summary":"ReDoS in Giskard Scan text perturbation","details":"# ReDoS in Giskard text perturbation detector\n\nA Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the [GitHub Security Lab](https://securitylab.github.com) team. When processing datasets with specific text patterns with Giskard detectors, this vulnerability could trigger exponential regex evaluation times, potentially leading to denial of service.\n\n## Details\n\nThe vulnerability affects Giskard's punctuation removal transformation used in the text perturbation detection. A regex used to detect URLs and links was vulnerable to catastrophic backtracking that could be triggered by specific patterns in the text.\n\n## Affected version\n\nGiskard versions prior to 2.15.5 are affected. Users should upgrade to version 2.15.5 or later, which includes a fix for this vulnerability.\n\n## Impact\n\nThis vulnerability can cause extended computation times or crashes in Giskard when processing text containing certain patterns.\n\n## Credit\n\nThis issue was discovered and reported by GHSL team member [@kevinbackhouse (Kevin Backhouse)](https://github.com/kevinbackhouse).","published":"2024-11-14T17:21:50.600Z","modified":"2026-08-12T03:51:21.187589083Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"giskard","fixedVersion":"2.15.5"}],"fix":{"url":"https://github.com/Giskard-AI/giskard/commit/48ce81f5c626171767188d6f0669498fb613b4d3","label":"Giskard-AI/giskard@48ce81f"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52524.json"},{"type":"ADVISORY","url":"https://github.com/Giskard-AI/giskard/security/advisories/GHSA-pjwm-cr36-mwv3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52524"},{"type":"FIX","url":"https://github.com/Giskard-AI/giskard/commit/48ce81f5c626171767188d6f0669498fb613b4d3"},{"type":"PACKAGE","url":"https://github.com/Giskard-AI/giskard"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:21.187589083Z"}}