Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3045
  • PyPI/qiskit
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-1859
  • PyPI/qiskit-terra
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit 07 Jul
  • No fix available
  • Severity - 8.6 (High)
PYSEC-2026-1858
  • PyPI/qiskit-ibm-runtime
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-510
  • PyPI/qiskit
Qiskit allows arbitrary code execution decoding QPY format versions < 13 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-511
  • PyPI/qiskit-terra
Qiskit allows arbitrary code execution decoding QPY format versions < 13 29 Jun
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-6m2c-76ff-6vrf
  • PyPI/qiskit
  • PyPI/qiskit-terra
Qiskit allows arbitrary code execution decoding QPY format versions < 13 14 Mar 2025
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-fpmr-m242-xm7x
  • PyPI/qiskit
  • PyPI/qiskit-terra
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit 21 Feb 2025
  • Fix available
  • Severity - 8.6 (High)
GHSA-x4x5-jv3x-9c7m
  • PyPI/qiskit-ibm-runtime
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code 20 Mar 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-cq96-9974-v8hm
  • PyPI/qiskit-ibm-runtime
Dynamic Variable Evaluation in qiskit-ibm-runtime 20 Mar 2024
  • Fix available
  • Severity - 2.8 (Low)