--- title: "Security advisories" description: "Every published security advisory for QWED packages, with affected and fixed versions." url: https://qwedai.tech/security/advisories --- # Security advisories When a security problem in a QWED package has been fixed and released, its advisory is published here, newest first. Each entry links to its GitHub advisory, which is the canonical record. - **22** published advisories - **7** packages - **21** with a fixed release - critical **2** - high **10** - medium **10** 1. 16 Oct 2026 [Stats and consensus sandbox static gates can be bypassed to reach blocked primitives (incomplete fix of #336 / GHSA-6rxr-gq43-694g)](https://qwedai.tech/security/advisories/ghsa-j3x4-v3p2-4mq3) GHSA-j3x4-v3p2-4mq3 qwed Fixed in 7.3.0 high 2. 16 Oct 2026 [CodeVerifier certifies command-execution, file-access and exfiltration code as VERIFIED/ADMIT (incomplete fix of GHSA-6rxr-gq43-694g)](https://qwedai.tech/security/advisories/ghsa-4phf-6h72-9xfg) GHSA-4phf-6h72-9xfg qwed Fixed in 7.3.0 high 3. 16 Oct 2026 [SQLVerifier admits credential-dumping and tautology-injection queries (SELECT \* bypasses the sensitive-column denylist; tautology check matches exact shapes only)](https://qwedai.tech/security/advisories/ghsa-6cpx-8jrq-r7h3) GHSA-6cpx-8jrq-r7h3 qwed Fixed in 7.3.0 medium 4. 16 Oct 2026 [SQLVerifier certifies destructive and administrative SQL as VERIFIED/ADMIT (DML hidden in CTEs; incomplete statement-type denylist)](https://qwedai.tech/security/advisories/ghsa-6p94-4f75-g2wq) GHSA-6p94-4f75-g2wq qwed Fixed in 7.3.0 high 5. 16 Oct 2026 [DSLLogicVerifier NL->DSL bridge returns VERIFIED for contradictory or altered constraints (incomplete fix of GHSA-mfh5-3c8f-975p)](https://qwedai.tech/security/advisories/ghsa-g25v-44j8-gg7x) GHSA-g25v-44j8-gg7x qwed Fixed in 7.3.0 medium 6. 13 Oct 2026 [SQLVerifier admits a tautology hidden in a MySQL executable comment, and queries on tables outside the declared schema](https://qwedai.tech/security/advisories/ghsa-q5g6-6cw2-cjm3) GHSA-q5g6-6cw2-cjm3 qwed Fixed in 7.2.3 medium 7. 13 Oct 2026 [ConfigGuard and the code verifier miss project-scoped OpenAI API keys (sk-proj-)](https://qwedai.tech/security/advisories/ghsa-64xf-wffc-63fm) GHSA-64xf-wffc-63fm qwed Fixed in 7.2.3 medium · 5.3 8. 13 Oct 2026 [Code verifier returns VERIFIED and admits code that runs shell commands](https://qwedai.tech/security/advisories/ghsa-6rxr-gq43-694g) GHSA-6rxr-gq43-694g qwed Fixed in 7.2.3 high · 7.5 9. 10 Oct 2026 [ClassificationGuard certifies a contractor claim against employee facts (false VERIFIED via claim normalisation and unchecked facts)](https://qwedai.tech/security/advisories/ghsa-pr29-r6fv-grmq) GHSA-pr29-r6fv-grmq qwed-tax Fixed in 0.2.1 medium 10. 9 Oct 2026 [Compute-cost limits can be bypassed in the math parser and are absent in logic/DSL engines (denial of service)](https://qwedai.tech/security/advisories/ghsa-mxwv-x5qm-mrmf) GHSA-mxwv-x5qm-mrmf qwed Fixed in 7.2.2 medium · 6.5 11. 9 Oct 2026 [verify\_math returns VERIFIED for incorrect results on large numbers due to 15-digit evaluation precision](https://qwedai.tech/security/advisories/ghsa-j622-qffp-rc27) GHSA-j622-qffp-rc27 qwed Fixed in 7.2.2 medium · 6.5 12. 9 Oct 2026 [Logic verification can return VERIFIED for false theorems, non-equivalent formulas and contradictory constraints](https://qwedai.tech/security/advisories/ghsa-mfh5-3c8f-975p) GHSA-mfh5-3c8f-975p qwed Fixed in 7.2.2 medium · 6.5 13. 9 Oct 2026 [SymPy allow-list bypass in qwed\_sdk local math verification lets model output reach sympify() (incomplete fix for GHSA-xmm6-8r3x-j567)](https://qwedai.tech/security/advisories/ghsa-4v5r-g7f4-vvgc) GHSA-4v5r-g7f4-vvgc qwed Fixed in 7.2.2 high · 7.5 14. 9 Oct 2026 [QueryGuard ignores MySQL executable comments, bypassing table allow-lists and PII column protection](https://qwedai.tech/security/advisories/ghsa-q8r4-6gpp-5fx2) GHSA-q8r4-6gpp-5fx2 qwed-finance Fixed in 3.0.1 medium · 5.9 15. 9 Oct 2026 [Sanctions screening is bypassed by single-character perturbations inside sanctioned names](https://qwedai.tech/security/advisories/ghsa-mv2c-jwm9-pfrq) GHSA-mv2c-jwm9-pfrq qwed-finance Fixed in 3.0.1 high · 7.5 16. 9 Oct 2026 [ISO 20022 business rules read a different amount and currency than the parsed XML, allowing over-limit and disallowed-currency payments to pass](https://qwedai.tech/security/advisories/ghsa-mrrj-6m2q-jch9) GHSA-mrrj-6m2q-jch9 qwed-finance Fixed in 3.0.1 high · 7.5 17. 9 Oct 2026 [DeadlineGuard certifies directional and unlisted-event terms against the signing date (false VERIFIED)](https://qwedai.tech/security/advisories/ghsa-mrv2-8596-cx34) GHSA-mrv2-8596-cx34 qwed-legal, @qwed-ai/legal Fixed in 0.5.1 medium 18. 8 Oct 2026 [ToolGuard treats executable Responses API items (local\_shell\_call, shell\_call, apply\_patch\_call, computer\_call, custom\_tool\_call) as tool-free and verifies them](https://qwedai.tech/security/advisories/ghsa-xhq6-w3f2-m5w6) GHSA-xhq6-w3f2-m5w6 qwed-open-responses Fixed in 0.6.1 high · 8.1 19. 14 Sept 2026 [Remote code execution via unsanitized sympy.sympify() on untrusted model output in the math verifier](https://qwedai.tech/security/advisories/ghsa-xmm6-8r3x-j567) GHSA-xmm6-8r3x-j567 qwed Fixed in 7.2.1 high · 8.1 20. 27 Aug 2026 [qwed-mcp: RCE bypass of CVE-2026-55546 fix via \_\_getattribute\_\_ and string concatenation (affects patched 0.2.1)](https://qwedai.tech/security/advisories/ghsa-2p69-jpm6-jrxh) GHSA-2p69-jpm6-jrxh qwed-mcp Fixed in < 0.2.2 critical · 9.8 21. 14 Jun 2026 [Authenticated Remote Code Execution via Unsafe SymPy \`parse\_expr()\`](https://qwedai.tech/security/advisories/ghsa-q27q-98j4-9pfv) GHSA-q27q-98j4-9pfv · CVE-2026-55585 qwed Fixed in 5.1.2 high · 8.8 22. 13 Jun 2026 [Unsafe SymPy \`parse\_expr()\` Remote Code Execution via Unsanitized Math Expression Input](https://qwedai.tech/security/advisories/ghsa-mw6r-2hvm-4rp2) GHSA-mw6r-2hvm-4rp2 · CVE-2026-55546 qwed-mcp Fixed in 0.2.1 critical · 9.8 No advisories for this package. ## Found a vulnerability? Please report it privately, not in a public issue. The security policy explains how, and what happens next. [How to report](https://qwedai.tech/security)