QWED
v7.2.2 GitHub 60

Type to search pages, engines and advisories.

    Looking for API details?Search the docs

    Security advisories

    Every published advisory for QWED packages, newest first. Each one links to its GitHub advisory, which is the canonical record.

    14 published advisories across 7 packages.

    PublishedAdvisoryPackageFixed inSeverity
    2026-10-10ClassificationGuard certifies a contractor claim against employee facts (false VERIFIED via claim normalisation and unchecked facts)
    GHSA-pr29-r6fv-grmq
    		qwed-tax0.2.1medium
    2026-10-09Compute-cost limits can be bypassed in the math parser and are absent in logic/DSL engines (denial of service)
    GHSA-mxwv-x5qm-mrmf
    		qwed7.2.2medium · 6.5
    2026-10-09verify_math returns VERIFIED for incorrect results on large numbers due to 15-digit evaluation precision
    GHSA-j622-qffp-rc27
    		qwed7.2.2medium · 6.5
    2026-10-09Logic verification can return VERIFIED for false theorems, non-equivalent formulas and contradictory constraints
    GHSA-mfh5-3c8f-975p
    		qwed7.2.2medium · 6.5
    2026-10-09SymPy allow-list bypass in qwed_sdk local math verification lets model output reach sympify() (incomplete fix for GHSA-xmm6-8r3x-j567)
    GHSA-4v5r-g7f4-vvgc
    		qwed7.2.2high · 7.5
    2026-10-09QueryGuard ignores MySQL executable comments, bypassing table allow-lists and PII column protection
    GHSA-q8r4-6gpp-5fx2
    		qwed-finance3.0.1medium · 5.9
    2026-10-09Sanctions screening is bypassed by single-character perturbations inside sanctioned names
    GHSA-mv2c-jwm9-pfrq
    		qwed-finance3.0.1high · 7.5
    2026-10-09ISO 20022 business rules read a different amount and currency than the parsed XML, allowing over-limit and disallowed-currency payments to pass
    GHSA-mrrj-6m2q-jch9
    		qwed-finance3.0.1high · 7.5
    2026-10-09DeadlineGuard certifies directional and unlisted-event terms against the signing date (false VERIFIED)
    GHSA-mrv2-8596-cx34
    		qwed-legal, @qwed-ai/legal0.5.1medium
    2026-10-08ToolGuard treats executable Responses API items (local_shell_call, shell_call, apply_patch_call, computer_call, custom_tool_call) as tool-free and verifies them
    GHSA-xhq6-w3f2-m5w6
    		qwed-open-responses0.6.1high · 8.1
    2026-09-14Remote code execution via unsanitized sympy.sympify() on untrusted model output in the math verifier
    GHSA-xmm6-8r3x-j567
    		qwed7.2.1high · 8.1
    2026-08-27qwed-mcp: RCE bypass of CVE-2026-55546 fix via __getattribute__ and string concatenation (affects patched 0.2.1)
    GHSA-2p69-jpm6-jrxh
    		qwed-mcp0.2.2critical · 9.8
    2026-06-14Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
    GHSA-q27q-98j4-9pfv · CVE-2026-55585
    		qwed5.1.2high · 8.8
    2026-06-13Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input
    GHSA-mw6r-2hvm-4rp2 · CVE-2026-55546
    		qwed-mcp0.2.1critical · 9.8