--- title: "Security advisories" description: "Every published security advisory for QWED packages, with affected and fixed versions." url: https://qwedai.com/security/advisories --- # Security advisories Every published advisory for QWED packages, newest first. Each one links to its GitHub advisory, which is the canonical record. 14 published advisories across 7 packages. | Published | Advisory | Package | Fixed in | Severity | | --- | --- | --- | --- | --- | | 2026-10-10 | [ClassificationGuard certifies a contractor claim against employee facts (false VERIFIED via claim normalisation and unchecked facts)](https://qwedai.com/security/advisories/ghsa-pr29-r6fv-grmq) GHSA-pr29-r6fv-grmq | qwed-tax | 0.2.1 | medium | | 2026-10-09 | [Compute-cost limits can be bypassed in the math parser and are absent in logic/DSL engines (denial of service)](https://qwedai.com/security/advisories/ghsa-mxwv-x5qm-mrmf) GHSA-mxwv-x5qm-mrmf | qwed | 7.2.2 | medium · 6.5 | | 2026-10-09 | [verify\_math returns VERIFIED for incorrect results on large numbers due to 15-digit evaluation precision](https://qwedai.com/security/advisories/ghsa-j622-qffp-rc27) GHSA-j622-qffp-rc27 | qwed | 7.2.2 | medium · 6.5 | | 2026-10-09 | [Logic verification can return VERIFIED for false theorems, non-equivalent formulas and contradictory constraints](https://qwedai.com/security/advisories/ghsa-mfh5-3c8f-975p) GHSA-mfh5-3c8f-975p | qwed | 7.2.2 | medium · 6.5 | | 2026-10-09 | [SymPy allow-list bypass in qwed\_sdk local math verification lets model output reach sympify() (incomplete fix for GHSA-xmm6-8r3x-j567)](https://qwedai.com/security/advisories/ghsa-4v5r-g7f4-vvgc) GHSA-4v5r-g7f4-vvgc | qwed | 7.2.2 | high · 7.5 | | 2026-10-09 | [QueryGuard ignores MySQL executable comments, bypassing table allow-lists and PII column protection](https://qwedai.com/security/advisories/ghsa-q8r4-6gpp-5fx2) GHSA-q8r4-6gpp-5fx2 | qwed-finance | 3.0.1 | medium · 5.9 | | 2026-10-09 | [Sanctions screening is bypassed by single-character perturbations inside sanctioned names](https://qwedai.com/security/advisories/ghsa-mv2c-jwm9-pfrq) GHSA-mv2c-jwm9-pfrq | qwed-finance | 3.0.1 | high · 7.5 | | 2026-10-09 | [ISO 20022 business rules read a different amount and currency than the parsed XML, allowing over-limit and disallowed-currency payments to pass](https://qwedai.com/security/advisories/ghsa-mrrj-6m2q-jch9) GHSA-mrrj-6m2q-jch9 | qwed-finance | 3.0.1 | high · 7.5 | | 2026-10-09 | [DeadlineGuard certifies directional and unlisted-event terms against the signing date (false VERIFIED)](https://qwedai.com/security/advisories/ghsa-mrv2-8596-cx34) GHSA-mrv2-8596-cx34 | qwed-legal, @qwed-ai/legal | 0.5.1 | medium | | 2026-10-08 | [ToolGuard treats executable Responses API items (local\_shell\_call, shell\_call, apply\_patch\_call, computer\_call, custom\_tool\_call) as tool-free and verifies them](https://qwedai.com/security/advisories/ghsa-xhq6-w3f2-m5w6) GHSA-xhq6-w3f2-m5w6 | qwed-open-responses | 0.6.1 | high · 8.1 | | 2026-09-14 | [Remote code execution via unsanitized sympy.sympify() on untrusted model output in the math verifier](https://qwedai.com/security/advisories/ghsa-xmm6-8r3x-j567) GHSA-xmm6-8r3x-j567 | qwed | 7.2.1 | high · 8.1 | | 2026-08-27 | [qwed-mcp: RCE bypass of CVE-2026-55546 fix via \_\_getattribute\_\_ and string concatenation (affects patched 0.2.1)](https://qwedai.com/security/advisories/ghsa-2p69-jpm6-jrxh) GHSA-2p69-jpm6-jrxh | qwed-mcp | 0.2.2 | critical · 9.8 | | 2026-06-14 | [Authenticated Remote Code Execution via Unsafe SymPy \`parse\_expr()\`](https://qwedai.com/security/advisories/ghsa-q27q-98j4-9pfv) GHSA-q27q-98j4-9pfv · CVE-2026-55585 | qwed | 5.1.2 | high · 8.8 | | 2026-06-13 | [Unsafe SymPy \`parse\_expr()\` Remote Code Execution via Unsanitized Math Expression Input](https://qwedai.com/security/advisories/ghsa-mw6r-2hvm-4rp2) GHSA-mw6r-2hvm-4rp2 · CVE-2026-55546 | qwed-mcp | 0.2.1 | critical · 9.8 |