Issues

• Probe._prune_data deletes from class-level prompt lists, so GCGCached shrinks for every later instance

  needs-triage
  NVIDIA/garak#2442 · Filter by author YusefSyed opened on Nov 7, 2026

• garak --report fails with a pydantic validation error when the run had no target name

  needs-triage
  NVIDIA/garak#2440 · Filter by author YusefSyed opened on Nov 7, 2026

• visual_jailbreak.FigStep appends prompts to a class-level list, so prompts duplicate across instances

  needs-triage
  NVIDIA/garak#2438 · Filter by author YusefSyed opened on Nov 7, 2026

• garak does not detect indirect prompt injection leading to tool call hijacking in agentic pipelines

  bugneeds-triage
  NVIDIA/garak#2436 · Filter by author sarosh-quraishi opened on Nov 7, 2026

• snowball.DontStartYes scores "There is no ..." answers as affirmations

  needs-triage
  NVIDIA/garak#2412 · Filter by author ChrystianSchutz opened on Nov 5, 2026
  1

• Evaluate RefusalModel across current garak probes using refusal detection

  detectorsneeds-triage
  NVIDIA/garak#2409 · Filter by author patriciapampanelli opened on Nov 4, 2026
  

• Evaluate refusal detection for smuggling.HomoglyphObfuscation

  detectorsneeds-triage
  NVIDIA/garak#2408 · Filter by author patriciapampanelli opened on Nov 4, 2026
  1

• Run crashes with "daemonic processes are not allowed to have children" when parallel_attempts and parallel_requests are both > 1

  bug
  NVIDIA/garak#2399 · Filter by author SupreetTadeparti opened on Nov 3, 2026
  2

• sata: _nltk_mask_payloads masks one fewer word than n, and n=1 yields no prompts

  needs-triage
  NVIDIA/garak#2392 · Filter by author Vitalik-Hakim opened on Nov 2, 2026

• Single-tier TBSA result bypasses final rounding

  needs-triage
  NVIDIA/garak#2389 · Filter by author ASHMEET555 opened on Nov 1, 2026
  

• Probe pool workers silently skip post-buff untransform when the pool runs under a spawn start method

  needs-triage
  NVIDIA/garak#2386 · Filter by author Wilson0511 opened on Nov 1, 2026
  2

• PluginProvider.storeInstance races and clobbers the dedup cache for concurrent loads

  needs-triage
  NVIDIA/garak#2384 · Filter by author Wilson0511 opened on Nov 1, 2026

• Judge prompt truncation removes the request instead of the excess at the end

  needs-triage
  NVIDIA/garak#2382 · Filter by author codewithfourtix opened on Oct 31, 2026
  2

• AgentBreaker can report a successful attack with another output’s refusal

  bugneeds-triage
  NVIDIA/garak#2381 · Filter by author Harry-Ashley opened on Oct 31, 2026
  2

• Proposal: opt-in source-mutation fixtures for numeric, polarity and Unicode review cues

  needs-triage
  NVIDIA/garak#2377 · Filter by author socio-sapien opened on Oct 29, 2026

• Proposal: probes for adversarial code comments against LLM code reviewers (CommentInject)

  needs-triage
  NVIDIA/garak#2376 · Filter by author sunny-chokshi opened on Oct 29, 2026

• docs: tbsa

  documentationneeds-triage
  NVIDIA/garak#2373 · Filter by author leondz opened on Oct 28, 2026
  

• detectors.packagehallucination.JavaScriptNpm flags subpath imports, local modules and node: builtins as hallucinated packages

  needs-triage
  NVIDIA/garak#2370 · Filter by author kjgggggg opened on Oct 28, 2026

• Probe proposal: forced-continuation (EOS-suppression) leakage of hidden context — a "forced epilogue" canary test

  needs-triage
  NVIDIA/garak#2369 · Filter by author VincenzoDon opened on Oct 28, 2026
  2

• Empty run.spec loses precedence to deprecated probe_spec

  needs-triage
  NVIDIA/garak#2363 · Filter by author Vl4dC opened on Oct 27, 2026
  1

• nim: NVMultimodal(embed_data=True) duplicates attachment payload in _conversation_to_list

  NVIDIA/garak#2356 · Filter by author DevCop95 opened on Oct 23, 2026
  2

• Tiering for post-Technique and Intent

  needs-triage
  NVIDIA/garak#2354 · Filter by author erickgalinkin opened on Oct 22, 2026
  5

• Same --seed sends different prompts each run: several probes build prompts from set iteration order

  needs-triage
  NVIDIA/garak#2352 · Filter by author AkshayShah03 opened on Oct 22, 2026
  1

  

• AnthropicGenerator stops on HTTP 529 overloaded_error instead of backing off

  NVIDIA/garak#2350 · Filter by author chrikrah opened on Oct 22, 2026
  2

• Judge truncation loops indefinitely when the system prompt alone exceeds the context budget

  bug
  NVIDIA/garak#2345 · Filter by author rohankanotra03 opened on Oct 20, 2026
  6