VYPR

Superduper

by Superduper Io

Source repositories

CVEs (1)

  • CVE-2026-31225HigMay 12, 2026
    risk 0.57cvss 8.8epss 0.00

    The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function to dynamically evaluate user-supplied query operands without proper sanitization…