CVE-2026-55585
2 advisories.
PyPI/qwed CVE-2026-55585: high 8.8, EPSS 0.78%
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
Action: Upgrade qwed to 5.1.2 or later.
pip install qwed==5.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: GHSA-q27q-98j4-9pfv
- https://github.com/QWED-AI/qwed-verification/security/advisories/GHSA-q27q-98j4-9pfv
- https://github.com/QWED-AI/qwed-verification/pull/200
- https://github.com/QWED-AI/qwed-verification/commit/6066b68c0c4f4cc2c3771824822aaa864d082ef8
- https://github.com/QWED-AI/qwed-verification/commit/dc9d4db72ca4b4ae3f96d0e6a0c27a9e38a06f61
- https://github.com/QWED-AI/qwed-verification
CVE-2026-55585 · published · modified · JSON
PyPI/qwed CVE-2026-55585: high 8.8, EPSS 0.78%
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
Action: Upgrade qwed to 5.1.2 or later.
pip install qwed==5.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: PYSEC-2026-3914
- https://github.com/QWED-AI/qwed-verification/security/advisories/GHSA-q27q-98j4-9pfv
- https://github.com/QWED-AI/qwed-verification/pull/200
- https://github.com/QWED-AI/qwed-verification/commit/6066b68c0c4f4cc2c3771824822aaa864d082ef8
- https://github.com/QWED-AI/qwed-verification/commit/dc9d4db72ca4b4ae3f96d0e6a0c27a9e38a06f61
- https://github.com/QWED-AI/qwed-verification
- https://pypi.org/project/qwed
- https://github.com/advisories/GHSA-q27q-98j4-9pfv
- https://nvd.nist.gov/vuln/detail/CVE-2026-55585
CVE-2026-55585 · published · modified · JSON