Issues

• dan.DAN_Jailbreak, dan.DUDE and dan.Dan_6_0 send different prompts since v0.13.2

  bugneeds-triage
  NVIDIA/garak#2267 · Filter by author Lostmanu opened on Oct 3, 2026
  2

• WebSocketGenerator returns empty output for every prompt after the first

  bug
  NVIDIA/garak#2263 · Filter by author u7k4rs6 opened on Oct 1, 2026
  1

• promptinject: capped probes apply settings from the wrong prompt

  needs-triage
  NVIDIA/garak#2259 · Filter by author reeve25 opened on Oct 1, 2026

• Raw ANSI detector treats byte 0x17 as ESC

  needs-triage
  NVIDIA/garak#2254 · Filter by author SashaMIT opened on Sep 30, 2026

• Digest scores a detector with nothing evaluated as a complete failure (0.0 / DEFCON 1)

  bugdetectorsreporting
  NVIDIA/garak#2251 · Filter by author reeve25 opened on Sep 30, 2026
  1

• snowball.DontStartNo / DontStartYes descriptions are inverted relative to their scoring

  needs-triage
  NVIDIA/garak#2250 · Filter by author reeve25 opened on Sep 30, 2026
  3

  

• datasets pinned <4.0 blocks fix for CVE-2026-66007 (path traversal), same in 0.17.0

  needs-triage
  NVIDIA/garak#2248 · Filter by author SPECT3RR opened on Sep 29, 2026
  6

• New probe: Involuntary Jailbreak (self-prompting universal attack, arXiv:2508.13246, TMLR 2026)

  needs-triage
  NVIDIA/garak#2246 · Filter by author smellslikeml opened on Sep 28, 2026

• Docs example: OpenAICompatible generator pointed at a cloud uncensored-model endpoint

  needs-triage
  NVIDIA/garak#2244 · Filter by author haterfactory opened on Sep 27, 2026
  1

• buff: test prompt injection with low-resource code-switching

  needs-triage
  NVIDIA/garak#2240 · Filter by author Yugesh-reddy opened on Sep 26, 2026
  4

• outputs_for and prompt_for compare lang_spec with a bare !=, so a comma-separated spec matches nothing

  bug
  NVIDIA/garak#2239 · Filter by author chrikrah opened on Sep 26, 2026
  3

• probes: agentic security probes aligned to OWASP Agentic Top 10 (safelabs-eval)

  needs-triage
  NVIDIA/garak#2233 · Filter by author iamwaqarjaved opened on Sep 25, 2026

• Probe class proposal: stale memory persistence across sessions

  needs-triage
  NVIDIA/garak#2232 · Filter by author samvallad33 opened on Sep 24, 2026
  1

• buffs: assigning a bare Message to attempt.prompt drops the system turn

  buffs
  NVIDIA/garak#2229 · Filter by author MohammedAlkindi opened on Sep 23, 2026
  3

• hf_args keys are silently dropped on transformers 5.x: torch_dtype has no effect and quantization_config cannot be passed

  bug
  NVIDIA/garak#2226 · Filter by author enqidu opened on Sep 22, 2026
  3

• IterativeProbe.probe() raises TypeError when soft_probe_prompt_cap is unset

  Bug

  NVIDIA/garak#2220 · Filter by author VishnuR23 opened on Sep 21, 2026
  2

• Preserve detector-result alignment when reverse translations are unavailable

  needs-triage
  NVIDIA/garak#2218 · Filter by author sylvesterkaczmarek opened on Sep 19, 2026

• English only detectors misjudge targets tht reply in another language in both diirections

  bugneeds-triage
  NVIDIA/garak#2217 · Filter by author Ayoubhm07 opened on Sep 19, 2026
  4

• Digest of an aggregated report scores each probe/detector pairing from one contributing run only

  needs-triage
  NVIDIA/garak#2213 · Filter by author feiiiiii5 opened on Sep 18, 2026
  3

• aggregate_reports drops payload_init and tree_data rows, so aggregated reports lose payload provenance and tree search history

  needs-triage
  NVIDIA/garak#2211 · Filter by author feiiiiii5 opened on Sep 18, 2026

• analyze_log and qual_review crash on unscoreable (null) detector scores in attempt records

  needs-triage
  NVIDIA/garak#2209 · Filter by author feiiiiii5 opened on Sep 18, 2026

• MitigationBypass and Prefixes use substring-anywhere matching, so a compliant response that names the topic scores as a refusal

  needs-triage
  NVIDIA/garak#2197 · Filter by author collapseindex opened on Sep 16, 2026
  2

• detectors.apikey.ApiKey hangs during detector phase with parallel_attempts=32 (CPU freezes, 61GB RSS)

  needs-triage
  NVIDIA/garak#2189 · Filter by author huihuilucy opened on Sep 14, 2026
  1

• Embodied probes: would garak take a detector that needs a simulator, or is that a separate tool?

  for-maintainersneeds-triagequestion
  NVIDIA/garak#2186 · Filter by author sattyamjjain opened on Sep 12, 2026

• add reusable support for intent-aware iterative probes

  needs-triage
  NVIDIA/garak#2180 · Filter by author patriciapampanelli opened on Sep 11, 2026
  2