https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:43:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-273431 EUVD-2026-273431 https://cve.radiocsirt.org/vuln/euvd-2026-273431 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2000 <p>A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats &lt; 13. A python process calling Qiskit 0.18.0 through 1.4.1&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.</p> <p>A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats &lt; 13. A python process calling Qiskit 0.18.0 through 1.4.1&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-2000 https://cve.radiocsirt.org/vuln/ghsa-6m2c-76ff-6vrf <p><strong>Affected:</strong> PyPI: qiskit-terra, PyPI: qiskit</p> <p>### Impact</p> <p>A maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats &lt; 13. A python process calling Qiskit&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of a specially constructed payload.</p> <p>### Patches</p> <p>Fixed in Qiskit 1.4.2 and in Qiskit 2.0.0rc2</p> <p><strong>Affected:</strong> PyPI: qiskit-terra, PyPI: qiskit</p> <p>### Impact</p> <p>A maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats &lt; 13. A python process calling Qiskit&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of a specially constructed payload.</p> <p>### Patches</p> <p>Fixed in Qiskit 1.4.2 and in Qiskit 2.0.0rc2</p> https://cve.radiocsirt.org/vuln/ghsa-6m2c-76ff-6vrf https://cve.radiocsirt.org/vuln/pysec-2026-510 <p><strong>Affected:</strong> PyPI: qiskit</p> <p>### Impact</p> <p>A maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats &lt; 13. A python process calling Qiskit&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of a specially constructed payload.</p> <p>### Patches</p> <p>Fixed in Qiskit 1.4.2 and in Qiskit 2.0.0rc2</p> <p><strong>Affected:</strong> PyPI: qiskit</p> <p>### Impact</p> <p>A maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats &lt; 13. A python process calling Qiskit&#39;s `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of a specially constructed payload.</p> <p>### Patches</p> <p>Fixed in Qiskit 1.4.2 and in Qiskit 2.0.0rc2</p> https://cve.radiocsirt.org/vuln/pysec-2026-510