Skip to content
OpenAdvisories

Package · PyPI

qwed

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-55585

    QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

    QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution. Prior to 5.1.2, the qwed package passes caller-controlled math expressions directly to Sy…

    QWED-AI qwed-verification qwed PyPI