PyPi: Mitiq

CVE-2020-26215

Transitive

Safety vulnerability ID: 39241

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Nov 18, 2020 Updated at Nov 07, 2024
Scan your Python projects for vulnerabilities →

Advisory

Mitiq 0.4.0 updates notebook version in requirements to resolve a vulnerability. See CVE-2020-26215.
https://github.com/unitaryfund/mitiq/pull/445

Affected package

mitiq

Latest version: 0.41.0

Mitiq is an open source toolkit for implementing error mitigation techniques on most current intermediate-scale quantum computers.

Affected versions

Fixed versions

Vulnerability changelog

Summary

This release adds new getter methods for fit errors, extrapolation curves, etc. in ZNE factory objects as well as
custom types for noisy operations, noisy bases, and decompositions in PEC. It also includes small updates and fixes
to the documentation, seeding options for PEC sampling functions, and bug fixes for a few non-deterministic test failures.

All Changes

- Add reference to review paper in docs (willzeng, gh-423).
- Add unitary folding API to RTD (rmlarose, gh-429).
- Add theory subsection on PEC in docs (elmandouh, gh-428).
- Fix small typo in documentation function name (nathanshammah, gh-435).
- Seed Qiskit simulator to fix non-deterministic test failure (rmlarose, gh-425).
- Fix formatting typo and include hyperlinks to documentation objects (nathanshammah, gh-438).
- Remove error in docs testing without tensorflow (nathanshammah, gh-439).
- Add seed to PEC functions (rmlarose, gh-432).
- Consolidate functions to generate randomized benchmarking circuits in different platforms, and clean up pyquil utils (rmlarose, gh-426).
- Add new get methods (for fit errors, extrapolation curve, etc.) to Factory objects (crazy4pi314, andreamari, gh-403).
- Update notebook version in requirements to resolve vulnerability found by security bot.(nathanshammah, gh-445).
- Add brief description of noise and error mitigtation to readme (rmlarose, gh-422).
- Fix broken links in documentation (purva-thakre, gh-448).
- Link to stable RTD instead of latest RTD in readme (rmlarose, gh-449).
- Add option to automatically deduce the number of samples in PEC (andreamari, gh-451).
- Fix PEC sampling bug (rmlarose, gh-453).
- Add types for PEC (rmlarose, gh-408).
- Add warning for large samples in PEC (sid1993, gh-459).
- Seed a PEC test to avoid non-deterministic failure (andreamari, gh-460).
- Update contributing docs (purva-thakre, gh-465).

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

MEDIUM 6.1

CVSS v3 Details

MEDIUM 6.1
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
REQUIRED
Scope (S)
CHANGED
Confidentiality Impact (C)
LOW
Integrity Impact (I)
LOW
Availability Availability (A)
NONE

CVSS v2 Details

MEDIUM 5.8
Access Vector (AV)
NETWORK
Access Complexity (AC)
MEDIUM
Authentication (Au)
NONE
Confidentiality Impact (C)
PARTIAL
Integrity Impact (I)
PARTIAL
Availability Impact (A)
NONE