
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
LabOne Q is Zurich Instrument’s software framework to accelerate progress in quantum computing. Its Python-based, high-level programming interface enables users to concentrate on intuitive, efficient experiment design, while automatically accounting for their instrumentation details and maximizing useful computation time. Tight system integration between software and hardware ensures a seamless user experience from setups with a single qubit to those with 100 and more.
⚠️ This software requires Python 3.10 or higher. We assume that
pip
andpython
use a corresponding Python version.
💡 To ease the maintenance of multiple installations, we recommended to use Python environments through e.g. venv, pipenv or conda.
The following commands will make the latest release of LabOne Q available in your current environment.
$ pip install --upgrade laboneq
This will fetch the latest release from PyPI. If you instead would like to install from source, you will additionally need to install a Rust toolchain. For this, follow the instructions on rustup.rs.
Find the LabOne Q Manual here: https://docs.zhinst.com/labone_q_user_manual/
Dive right into using LabOne Q and generate your first pulse sequence: https://docs.zhinst.com/labone_q_user_manual/core/getting_started/hello_world.html
The API Documentation is published here: https://docs.zhinst.com/labone_q_user_manual/core/reference/simple.html
FAQs
Zurich Instruments LabOne Q software framework for quantum computing control
We found that laboneq demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.