Vyperlang vulnerabilities

Products

• Vyper 53

Newest

• vyperlang vyper Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments CVE-2026-114663 8.6 HighOctober 22, 2026
• vyperlang vyper Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound CVE-2026-114118 6.3 MediumOctober 21, 2026
• vyperlang vyper Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches CVE-2026-114117 8.2 HighOctober 21, 2026
• vyperlang vyper Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators CVE-2026-114116 6.0 MediumOctober 21, 2026
• vyperlang vyper Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection CVE-2026-114115 6.3 MediumOctober 21, 2026
• vyperlang vyper Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters CVE-2026-114114 6.0 MediumOctober 21, 2026
• vyperlang vyper Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls CVE-2020-37286 Fix available 8.3 HighOctober 6, 2026
• vyperlang vyper Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments CVE-2020-37287 Fix available 8.2 HighOctober 6, 2026
• vyperlang vyper Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops CVE-2020-37288 Fix available 6.3 MediumOctober 6, 2026
• vyperlang vyper Vyper's `slice()` may elide side-effects when output length is 0 CVE-2025-47774 2.9 LowMay 15, 2025
• vyperlang vyper Vyper's `concat()` builtin may elide side-effects for zero-length arguments CVE-2025-47285 2.9 LowMay 15, 2025
• vyperlang vyper sqrt doesn't define rounding behavior in Vyper CVE-2025-26622 Fix available 2.3 LowFebruary 21, 2025
• vyperlang vyper double eval in For List Iter in Vyper CVE-2025-27104 Fix available 2.3 LowFebruary 21, 2025
• vyperlang vyper AugAssign evaluation order causing OOB write within the object in Vyper CVE-2025-27105 Fix available 2.3 LowFebruary 21, 2025
• vyperlang vyper Success of Certain Precompile Calls not Checked in Vyper CVE-2025-21607 Fix available 2.3 LowJanuary 14, 2025
• vyperlang vyper vyper performs double eval of the argument of sqrt CVE-2024-32649 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper vyper default functions don't respect nonreentrancy keys CVE-2024-32648 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper vyper performs double eval of raw_args in create_from_blueprint CVE-2024-32647 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper vyper performs double eval of the slice args when buffer from adhoc locations CVE-2024-32646 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper vyper performs incorrect topic logging in raw_log CVE-2024-32645 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper vyper's range(start, start + N) reverts for negative numbers CVE-2024-32481 Fix available 5.3 MediumApril 25, 2024
• vyperlang vyper Vyper extract32 can ready dirty memory CVE-2024-24564 Fix available 3.7 LowFebruary 26, 2024
• vyperlang vyper Vyper _abi_decode Memory Overflow CVE-2024-26149 Fix available 3.7 LowFebruary 26, 2024
• vyperlang vyper Vyper array negative index vulnerability CVE-2024-24563 Fix available 9.8 CriticalFebruary 7, 2024
• vyperlang vyper Vyper SHA3 code generation bug CVE-2024-24559 Fix available 3.7 LowFebruary 5, 2024
• vyperlang vyper Vyper external calls can overflow return data to return input buffer CVE-2024-24560 Fix available 3.7 LowFebruary 2, 2024
• vyperlang vyper Vyper bounds check on built-in `slice()` function can be overflowed CVE-2024-24561 Fix available 9.8 CriticalFebruary 1, 2024
• vyperlang vyper raw_call `value=` kwargs not disabled for static and delegate calls CVE-2024-24567 Fix available 4.8 MediumJanuary 30, 2024
• vyperlang vyper concat built-in can corrupt memory in vyper CVE-2024-22419 Fix available 7.3 HighJanuary 18, 2024
• vyperlang vyper Vyper has incorrect storage layout for contracts containing large arrays CVE-2023-46247 Fix available 7.5 HighDecember 13, 2023
• vyperlang vyper _abi_decode input not validated in complex expressions in Vyper CVE-2023-42460 Fix available 5.3 MediumSeptember 26, 2023
• vyperlang vyper Vyper vulnerable to memory corruption in certain builtins utilizing `msize` CVE-2023-42443 Fix available 8.1 HighSeptember 18, 2023
• vyperlang vyper Vyper has incorrect re-entrancy lock when key is empty string CVE-2023-42441 Fix available 5.3 MediumSeptember 18, 2023
• vyperlang vyper Vyper: incorrect order of evaluation of side effects for some builtins CVE-2023-41052 Fix available 3.7 LowSeptember 4, 2023
• vyperlang vyper Vyper: reversed order of side effects for some operations CVE-2023-40015 Fix available 3.7 LowSeptember 4, 2023
• vyperlang vyper Vyper incorrectly allocated named re-entrancy locks CVE-2023-39363 Fix available 9.1 CriticalAugust 7, 2023
• vyperlang vyper Vyper's ecrecover can return undefined data if signature does not verify CVE-2023-37902 Fix available 5.3 MediumJuly 25, 2023
• vyperlang vyper Nonpayable default functions are sometimes payable in vyper CVE-2023-32675 Fix available 3.7 LowMay 19, 2023
• vyperlang vyper Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls CVE-2023-32059 Fix available 7.5 HighMay 11, 2023
• vyperlang vyper Vyper vulnerable to integer overflow in loop CVE-2023-32058 Fix available 7.5 HighMay 11, 2023
• vyperlang vyper Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment CVE-2023-31146 Fix available 7.5 HighMay 11, 2023
• vyperlang vyper Vyper storage allocator overflow CVE-2023-30837 Fix available 7.5 HighMay 5, 2023
• vyperlang vyper Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value CVE-2023-30629 Fix available 7.5 HighApril 24, 2023
• vyperlang vyper Multiple evaluation of contract address in call in vyper CVE-2022-29255 Fix available 8.2 HighJune 6, 2022
• vyperlang vyper Integer bounds error in Vyper CVE-2022-24845 Fix available 8.8 HighApril 13, 2022
• vyperlang vyper Buffer overflow in Vyper CVE-2022-24788 Fix available 7.1 HighApril 13, 2022
• vyperlang vyper Incorrect Comparison in Vyper CVE-2022-24787 Fix available 7.5 HighApril 4, 2022
• vyperlang vyper Memory corruption in Vyper CVE-2021-41121 Fix available 7.5 HighOctober 6, 2021
• vyperlang vyper Bounds check missing for decimal args in Vyper CVE-2021-41122 Fix available 4.3 MediumOctober 5, 2021
• vyperlang vyper Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator CVE-2021-48018 Fix available 8.3 HighAugust 5, 2021
• Show olderLoading…