AIKIDO-2026-769825

TL;DR

simpleeval's disallowed-function check inspects lists and tuples passed into an evaluated expression but skips set and frozenset members. An expression that hides a blocked function such as os.system inside a set literal or built-in reaches _check_disallowed_items without triggering the block. Evaluators that expose set-typed values to untrusted expressions can therefore smuggle a disallowed function past the sandbox. The fix extends the disallowed-items scan to cover set and frozenset containers.