Vulnerabilities

Filters

2 selected

38 records

Sort

Vendor: vyperlang Component: Vyper Clear all filters

TI-2025-19559 CVE-2025-26622 · GHSA-2p94-8669-xg86

sqrt doesn't define rounding behavior in Vyper

LOW 18

vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-02-21 Fixed in 0.4.1 CWE-682

TI-2025-19974 CVE-2025-27104 · GHSA-h33q-mhmp-8p67

double eval in For List Iter in Vyper

LOW 18

vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00447 Published 2025-02-21 Fixed in 0.4.1 CWE-662

TI-2025-19975 CVE-2025-27105 · GHSA-4w26-8p97-f4jp

AugAssign evaluation order causing OOB write within the object in Vyper

LOW 19

vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0057 Published 2025-02-21 Fixed in 0.4.1 CWE-787

TI-2025-15567 CVE-2025-21607 · GHSA-vgf2-gvx8-xwc3

Success of Certain Precompile Calls not Checked in Vyper

MEDIUM 45

Vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00666 Published 2025-01-14 Fixed in 0.4.1 CWE-670

TI-2024-21531 CVE-2024-32649 · GHSA-5jrj-52x8-m64h

vyper performs double eval of the argument of sqrt

MEDIUM 63

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2024-04-25 Fixed in 0.4.0 CWE-95

TI-2024-21530 CVE-2024-32648 · GHSA-m2v9-w374-5hj9

vyper default functions don't respect nonreentrancy keys

LOW 30

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00415 Published 2024-04-25 Fixed in 0.3.0 CWE-667

TI-2024-21529 CVE-2024-32647 · GHSA-3whq-64q2-qfj6

vyper performs double eval of raw_args in create_from_blueprint

MEDIUM 57

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2024-04-25 Fixed in 0.4.0 CWE-95

TI-2024-21528 CVE-2024-32646 · GHSA-r56x-j438-vw5m

vyper performs double eval of the slice args when buffer from adhoc locations

MEDIUM 57

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2024-04-25 Fixed in 0.4.0 CWE-20

TI-2024-21527 CVE-2024-32645 · GHSA-xchq-w5r3-4wg3

vyper performs incorrect topic logging in raw_log

MEDIUM 63

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2024-04-25 Fixed in 0.4.0 CWE-20

TI-2024-21375 CVE-2024-32481 · GHSA-ppx5-q359-pvwj

vyper's range(start, start + N) reverts for negative numbers

MEDIUM 63

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00791 Published 2024-04-25 Fixed in 0.4.0b1, 0.4.0 CWE-681

TI-2024-16185 CVE-2024-24564 · GHSA-4hwq-4cpm-8vmx

Vyper extract32 can ready dirty memory

MEDIUM 57

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00561 Published 2024-02-26 Fixed in 0.4.0 CWE-125

TI-2024-17239 CVE-2024-26149 · GHSA-9p8r-4xp4-gw5w

Vyper _abi_decode Memory Overflow

MEDIUM 57

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00542 Published 2024-02-26 Fixed in 0.4.0 CWE-119

TI-2024-16184 CVE-2024-24563 · GHSA-52xq-j7v9-v4v2

Vyper array negative index vulnerability

HIGH 76

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01539 Published 2024-02-07 Fixed in 0.4.0 CWE-129

TI-2024-16180 CVE-2024-24559 · GHSA-6845-xw22-ffxv

Vyper SHA3 code generation bug

MEDIUM 57

Vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2024-02-05 Fixed in 0.4.0 CWE-327

TI-2024-16181 CVE-2024-24560 · GHSA-gp3w-2v2m-p686

Vyper external calls can overflow return data to return input buffer

MEDIUM 63

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00526 Published 2024-02-02 Fixed in 0.4.0 CWE-119

TI-2024-16182 CVE-2024-24561 · GHSA-9x7f-gwxq-6f2c

Vyper bounds check on built-in `slice()` function can be overflowed

HIGH 82

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2024-02-01 Fixed in 0.4.0 CWE-119

TI-2024-16188 CVE-2024-24567 · GHSA-x2c2-q32w-4w6m

raw_call `value=` kwargs not disabled for static and delegate calls

MEDIUM 57

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00485 Published 2024-01-30 Fixed in 0.4.0 CWE-754

TI-2024-14992 CVE-2024-22419 · GHSA-2q8v-3gqq-4f8p

concat built-in can corrupt memory in vyper

HIGH 81

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0077 Published 2024-01-18 Fixed in 0.4.0 CWE-120

TI-2023-24874 CVE-2023-46247 · GHSA-6m97-7527-mh74

Vyper has incorrect storage layout for contracts containing large arrays

LOW 34

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2023-12-13 Fixed in 0.3.8 CWE-193

TI-2023-22625 CVE-2023-42460 · GHSA-cx2q-hfxr-rj97

_abi_decode input not validated in complex expressions in Vyper

LOW 34

Vyper is a Pythonic Smart Contract Language for the EVM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00671 Published 2023-09-26 Fixed in 0.3.10 CWE-682

TI-2023-22608 CVE-2023-42443 · GHSA-c647-pxm2-c52w

Vyper vulnerable to memory corruption in certain builtins utilizing `msize`

LOW 39

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00832 Published 2023-09-18 Fixed in 0.3.10 CWE-787

TI-2023-22606 CVE-2023-42441 · GHSA-3hg2-r75x-g69m

Vyper has incorrect re-entrancy lock when key is empty string

LOW 31

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00514 Published 2023-09-18 Fixed in 0.3.10 CWE-833

TI-2023-20906 CVE-2023-40015 · GHSA-g2xh-c426-v8mf

Vyper: reversed order of side effects for some operations

LOW 25

Vyper is a Pythonic Smart Contract Language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00492 Published 2023-09-04 No fix listed CWE-670

TI-2023-21678 CVE-2023-41052 · GHSA-4hg4-9mf5-wxxq

Vyper: incorrect order of evaluation of side effects for some builtins

LOW 25

Vyper is a Pythonic Smart Contract Language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00536 Published 2023-09-04 Fixed in 0.3.10 CWE-670

TI-2023-20502 CVE-2023-39363 · GHSA-5824-cm3x-3c38

Vyper incorrectly allocated named re-entrancy locks

MEDIUM 41

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM).

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00821 Published 2023-08-07 Fixed in 0.3.1 CWE-863