Skip to content
OpenAdvisories

Package · PyPI

qiskit

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2025-2000

    Qiskit SDK code execution

    A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats < 13. A python process calling Qiskit 0.18.0 through 1.4.1's `qiskit.qpy.load()` function could potentially…

    IBM Qiskit SDK qiskit qiskit-terra PyPI
  • High 8.6
    CVE-2025-1403

    Qiskit SDK denial of service

    Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library.

    IBM Qiskit SDK qiskit qiskit-terra PyPI