qBraid actively supports security updates for the latest minor release line of qbraid-algorithms: the most recent MAJOR.MINOR version together with every patch release within it. For example, if the current release is 1.2.3, then 1.2.x is supported and 1.1.x is not.

Older minor lines receive fixes only where an issue is judged severe and a straightforward backport exists.

The qBraid team takes the security of our software seriously, across every repository in this organization. We encourage responsible disclosure of any security vulnerability.

Use GitHub's private security advisory form for this repository:

Report a security vulnerability

Please do not report security vulnerabilities through public GitHub issues, pull requests, or discussions.

If an issue originates in an upstream dependency rather than in qbraid-algorithms itself, whether a direct dependency or one reached through an optional extra, please report it to that project as well and tell us here. We will assess whether users are exposed through a path this package creates, and advise them accordingly.

• Acknowledgment of your report within two business days.
• An assessment of severity and scope, and a request for any further detail we need.
• Progress updates while we work on a fix.
• Notification when the issue is resolved, including the release carrying the fix, and credit in the advisory unless you prefer otherwise.

• The type of issue and its impact.
• The version of qbraid-algorithms affected, and the Python version and platform.
• Full paths of the source files involved, if known.
• Steps to reproduce, ideally a minimal example.
• Any proof-of-concept or exploit code you are willing to share.