Skip to content
OpenAdvisories

Package · PyPI

superduper-framework

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-31225

    Superduper: Remote code execution via unsafe eval in superduper query parsing

    The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function to dynamically evaluate user-supplied query operands without …

    superduper-framework PyPI