{"action":"Upgrade qiskit-ibm-runtime to 0.21.2 or later.","affected":[{"fixed":"0.21.2","introduced":"0.1.0"}],"component":"qiskit-ibm-runtime","cve_ids":["CVE-2024-29032"],"ecosystem":"PyPI","epss":0.00372,"exploited":false,"fixed_versions":["0.21.2"],"ghsa_id":"GHSA-x4x5-jv3x-9c7m","id":"tcs_01M5KG3G66ZDC2Z7NHJQKKD8YV","modified_at":"2026-09-10T03:49:24.724667698Z","published_at":"2024-03-20T15:44:22Z","references":["https://osv.dev/vulnerability/GHSA-x4x5-jv3x-9c7m","https://github.com/Qiskit/qiskit-ibm-runtime/security/advisories/GHSA-x4x5-jv3x-9c7m","https://nvd.nist.gov/vuln/detail/CVE-2024-29032","https://github.com/Qiskit/qiskit-ibm-runtime/commit/b78fca114133051805d00043a404b25a33835f4d","https://github.com/Qiskit/qiskit-ibm-runtime","https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskit_ibm_runtime/utils/json.py#L156-L159"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-x4x5-jv3x-9c7m","url":"https://osv.dev/vulnerability/GHSA-x4x5-jv3x-9c7m"}],"summary":"`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code"}