
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
PIQP is a Proximal Interior Point Quadratic Programming solver, which can solve dense and sparse quadratic programs of the form
$$ \begin{aligned} \min_{x} \quad & \frac{1}{2} x^\top P x + c^\top x \ \text {s.t.}\quad & Ax=b, \ & h_l \leq Gx \leq h_u, \ & x_l \leq x \leq x_u, \end{aligned} $$
Combining an infeasible interior point method with the proximal method of multipliers, the algorithm can handle ill-conditioned convex QP problems without the need for linear independence of the constraints.
PIQP support a wide range of interfaces including
PIQP is developed by the following people:
All contributors are affiliated with the Laboratoire d'Automatique and/or the Risk Analytics and Optimization Chair at EPFL, Switzerland.
This work was supported by the Swiss National Science Foundation under the NCCR Automation (grant agreement 51NF40_180545).
PIQP is an adapted implementation of work by Spyridon Pougkakiotis and Jacek Gondzio, and is built on the following open-source libraries:
If you found PIQP useful in your scientific work, we encourage you to cite our main paper:
@INPROCEEDINGS{schwan2023piqp,
author={Schwan, Roland and Jiang, Yuning and Kuhn, Daniel and Jones, Colin N.},
booktitle={2023 62nd IEEE Conference on Decision and Control (CDC)},
title={{PIQP}: A Proximal Interior-Point Quadratic Programming Solver},
year={2023},
volume={},
number={},
pages={1088-1093},
doi={10.1109/CDC49753.2023.10383915}
}
In case you are specifically using the sparse_multistage
KKT solver backend, we encourage you to cite the specific paper:
@misc{schwan2025piqp_multistage,
author={Schwan, Roland and Kuhn, Daniel and Jones, Colin N.},
title={Exploiting Multistage Optimization Structure in Proximal Solvers},
year={2025},
eprint = {arXiv:2503.12664}
}
The benchmarks are available in the following repos: piqp_benchmarks, piqp_multistage_benchmarks
PIQP is licensed under the BSD 2-Clause License.
FAQs
A Proximal Interior Point Quadratic Programming solver
We found that piqp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.