devqubit-cudaq (=0.1.12), el-loom (>=0.1.1 <=0.1.2) potentially affected by CVE-2026-24189 via cudaq (>=0.12.0.post1 <=0.13.0)

cudaq PYPI version =0.12.0.post1, =0.1.1, =0.1.2 Source cves: CVE-2026-24189 Source advisory: SNYK:PYTHON-CUDAQ-16636605...

Out-of-bounds Read

Overview cudaq is a Python bindings for the CUDA-Q toolkit for heterogeneous quantum-classical workflows. Affected versions of this package are vulnerable to Out-of-bounds Read via the endpoint process. An attacker can access sensitive information and cause a denial of service by sending a...