Issues

• Judge truncation loops indefinitely when the system prompt alone exceeds the context budget

  needs-triage
  NVIDIA/garak#2345 · Filter by author rohankanotra03 opened on Oct 20, 2026
  1

• Judge context check skips long CJK or numeric input with few whitespace-separated words

  needs-triage
  NVIDIA/garak#2344 · Filter by author rohankanotra03 opened on Oct 20, 2026
  1

• WebSocket generator drops real answers containing the typing-indicator substring

  needs-triage
  NVIDIA/garak#2343 · Filter by author rohankanotra03 opened on Oct 20, 2026
  1

• dan.DanInTheWild: 85 templates still contain [INSERT PROMPT HERE]; "send me the actual prompt" replies are scored as jailbreak hits

  bugneeds-triage
  NVIDIA/garak#2341 · Filter by author Kwonhj opened on Oct 20, 2026
  

• openai: keep finish_reason / refusal on empty completions so content_filter blocks are visible in the report

  architecturegenerators
  NVIDIA/garak#2340 · Filter by author Kwonhj opened on Oct 20, 2026
  4

• judge.Jailbreak: falls back to probe-level goal as the REQUEST, so the judge never sees the actual harmful prompt (phrasing.PastTense etc.)

  bugneeds-triage
  NVIDIA/garak#2339 · Filter by author Kwonhj opened on Oct 20, 2026
  3

• Stateful generators share one conversation across attempts (Rasa, WebSocket), and a path to multi-turn

  needs-triage
  NVIDIA/garak#2338 · Filter by author ashwingadhave opened on Oct 20, 2026
  3

• leetspeak() ignores its transmute_chance argument

  needs-triage
  NVIDIA/garak#2336 · Filter by author arjun-k047 opened on Oct 19, 2026
  2

• Community contribution wanted: open model for Jev-style detection

  detectors
  Initiative

  NVIDIA/garak#2333 · Filter by author viviennezhangx opened on Oct 19, 2026
  1

• LiteLLM generator doesn't back off on rate limits, timeouts or connection errors

  needs-triage
  NVIDIA/garak#2330 · Filter by author Somay-kousis opened on Oct 17, 2026

• Translation pipeline lowercases text and strips commas and colons, so translated runs score refusals as jailbreaks

  needs-triage
  NVIDIA/garak#2329 · Filter by author bodapatisaikrishna opened on Oct 17, 2026
  2

• WebSocketGenerator never reconnects after the server closes the connection; remaining prompts return "" and are scored as hits

  NVIDIA/garak#2327 · Filter by author bodapatisaikrishna opened on Oct 17, 2026
  5

• latentinjection translation probes add their payloads to a shared list, so EnZh sends French payloads

  bugneeds-triage
  NVIDIA/garak#2325 · Filter by author Bin0917 opened on Oct 17, 2026

• Truncated skip sequence spanning several lines is only partly removed

  needs-triage
  NVIDIA/garak#2323 · Filter by author Somay-kousis opened on Oct 17, 2026

• probe: Arabic prompt-injection & jailbreak set (60 prompts, CC BY 4.0) — guidance on non-English probe inclusion

  needs-triage
  NVIDIA/garak#2321 · Filter by author AbdaullahAG opened on Oct 16, 2026

• promptinject: rogue string is translated in the prompt but not in triggers, so non-English runs under-report hits

  needs-triage
  NVIDIA/garak#2307 · Filter by author przemyslvw opened on Oct 13, 2026
  4

• promptinject probes build every prompt four times

  bugneeds-triage
  NVIDIA/garak#2304 · Filter by author Bin0917 opened on Oct 13, 2026

• buff_max does not cap the attempts a buff returns

  needs-triage
  NVIDIA/garak#2303 · Filter by author Somay-kousis opened on Oct 13, 2026
  1

• detectors: dra default is too brittle

  detectors
  NVIDIA/garak#2302 · Filter by author leondz opened on Oct 12, 2026
  1

• RepeatDiverges scores pure repetition as a hit when copies are separated by newlines or punctuation

  needs-triage
  NVIDIA/garak#2299 · Filter by author Somay-kousis opened on Oct 12, 2026
  1

• RestGenerator with method get sends the prompt without URL encoding

  needs-triage
  NVIDIA/garak#2293 · Filter by author Somay-kousis opened on Oct 12, 2026

• fitd.FITD skips the first level query and sends the target turn twice

  bugneeds-triage
  NVIDIA/garak#2291 · Filter by author Ankur377823 opened on Oct 12, 2026

• probe: JOOD text-mixing jailbreaks

  needs-triage
  NVIDIA/garak#2289 · Filter by author SriLatha999 opened on Oct 11, 2026

• goodside.Tag "no refocusing statement" prompts still contain the refocusing statement

  bugneeds-triage
  NVIDIA/garak#2286 · Filter by author Ankur377823 opened on Oct 10, 2026

• Agent action failure taxonomy from ~580k measured action-streams — proposal for an agent-behavior probe family

  needs-triage
  NVIDIA/garak#2276 · Filter by author PHM-Audit opened on Oct 7, 2026