Open-source runtime verification for AI, licensed under Apache-2.0.
QWED
Contact

Type to search pages, engines and advisories.

    Looking for API details?Search the docs

    Security advisories

    When a security problem in a QWED package has been fixed and released, its advisory is published here, newest first. Each entry links to its GitHub advisory, which is the canonical record.

    • critical2
    • high10
    • medium10
    1. 16 Oct 2026
      Stats and consensus sandbox static gates can be bypassed to reach blocked primitives (incomplete fix of #336 / GHSA-6rxr-gq43-694g)GHSA-j3x4-v3p2-4mq3
      qwedFixed in 7.3.0
      high
    2. 16 Oct 2026
      CodeVerifier certifies command-execution, file-access and exfiltration code as VERIFIED/ADMIT (incomplete fix of GHSA-6rxr-gq43-694g)GHSA-4phf-6h72-9xfg
      qwedFixed in 7.3.0
      high
    3. 16 Oct 2026
      SQLVerifier admits credential-dumping and tautology-injection queries (SELECT * bypasses the sensitive-column denylist; tautology check matches exact shapes only)GHSA-6cpx-8jrq-r7h3
      qwedFixed in 7.3.0
      medium
    4. 16 Oct 2026
      SQLVerifier certifies destructive and administrative SQL as VERIFIED/ADMIT (DML hidden in CTEs; incomplete statement-type denylist)GHSA-6p94-4f75-g2wq
      qwedFixed in 7.3.0
      high
    5. 16 Oct 2026
      DSLLogicVerifier NL->DSL bridge returns VERIFIED for contradictory or altered constraints (incomplete fix of GHSA-mfh5-3c8f-975p)GHSA-g25v-44j8-gg7x
      qwedFixed in 7.3.0
      medium
    6. 13 Oct 2026
      SQLVerifier admits a tautology hidden in a MySQL executable comment, and queries on tables outside the declared schemaGHSA-q5g6-6cw2-cjm3
      qwedFixed in 7.2.3
      medium
    7. 13 Oct 2026
      ConfigGuard and the code verifier miss project-scoped OpenAI API keys (sk-proj-)GHSA-64xf-wffc-63fm
      qwedFixed in 7.2.3
      medium · 5.3
    8. 13 Oct 2026
      Code verifier returns VERIFIED and admits code that runs shell commandsGHSA-6rxr-gq43-694g
      qwedFixed in 7.2.3
      high · 7.5
    9. 10 Oct 2026
      ClassificationGuard certifies a contractor claim against employee facts (false VERIFIED via claim normalisation and unchecked facts)GHSA-pr29-r6fv-grmq
      qwed-taxFixed in 0.2.1
      medium
    10. 9 Oct 2026
      Compute-cost limits can be bypassed in the math parser and are absent in logic/DSL engines (denial of service)GHSA-mxwv-x5qm-mrmf
      qwedFixed in 7.2.2
      medium · 6.5
    11. 9 Oct 2026
      verify_math returns VERIFIED for incorrect results on large numbers due to 15-digit evaluation precisionGHSA-j622-qffp-rc27
      qwedFixed in 7.2.2
      medium · 6.5
    12. 9 Oct 2026
      Logic verification can return VERIFIED for false theorems, non-equivalent formulas and contradictory constraintsGHSA-mfh5-3c8f-975p
      qwedFixed in 7.2.2
      medium · 6.5
    13. 9 Oct 2026
      SymPy allow-list bypass in qwed_sdk local math verification lets model output reach sympify() (incomplete fix for GHSA-xmm6-8r3x-j567)GHSA-4v5r-g7f4-vvgc
      qwedFixed in 7.2.2
      high · 7.5
    14. 9 Oct 2026
      QueryGuard ignores MySQL executable comments, bypassing table allow-lists and PII column protectionGHSA-q8r4-6gpp-5fx2
      qwed-financeFixed in 3.0.1
      medium · 5.9
    15. 9 Oct 2026
      Sanctions screening is bypassed by single-character perturbations inside sanctioned namesGHSA-mv2c-jwm9-pfrq
      qwed-financeFixed in 3.0.1
      high · 7.5
    16. 9 Oct 2026
      ISO 20022 business rules read a different amount and currency than the parsed XML, allowing over-limit and disallowed-currency payments to passGHSA-mrrj-6m2q-jch9
      qwed-financeFixed in 3.0.1
      high · 7.5
    17. 9 Oct 2026
      DeadlineGuard certifies directional and unlisted-event terms against the signing date (false VERIFIED)GHSA-mrv2-8596-cx34
      qwed-legal, @qwed-ai/legalFixed in 0.5.1
      medium
    18. 8 Oct 2026
      ToolGuard treats executable Responses API items (local_shell_call, shell_call, apply_patch_call, computer_call, custom_tool_call) as tool-free and verifies themGHSA-xhq6-w3f2-m5w6
      qwed-open-responsesFixed in 0.6.1
      high · 8.1
    19. 14 Sept 2026
      Remote code execution via unsanitized sympy.sympify() on untrusted model output in the math verifierGHSA-xmm6-8r3x-j567
      qwedFixed in 7.2.1
      high · 8.1
    20. 27 Aug 2026
      qwed-mcp: RCE bypass of CVE-2026-55546 fix via __getattribute__ and string concatenation (affects patched 0.2.1)GHSA-2p69-jpm6-jrxh
      qwed-mcpFixed in < 0.2.2
      critical · 9.8
    21. 14 Jun 2026
      Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`GHSA-q27q-98j4-9pfv · CVE-2026-55585
      qwedFixed in 5.1.2
      high · 8.8
    22. 13 Jun 2026
      Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression InputGHSA-mw6r-2hvm-4rp2 · CVE-2026-55546
      qwed-mcpFixed in 0.2.1
      critical · 9.8

    Found a vulnerability?

    Please report it privately, not in a public issue. The security policy explains how, and what happens next.

    How to report