Skip to content
Vyperlang Vyper vulnerabilities
-
vyperlang vyper
Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments
CVE-2026-114663
8.6 High
-
vyperlang vyper
Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound
CVE-2026-114118
6.3 Medium
-
vyperlang vyper
Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches
CVE-2026-114117
8.2 High
-
vyperlang vyper
Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators
CVE-2026-114116
6.0 Medium
-
vyperlang vyper
Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection
CVE-2026-114115
6.3 Medium
-
vyperlang vyper
Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters
CVE-2026-114114
6.0 Medium
-
vyperlang vyper
Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls
CVE-2020-37286
Fix available
8.3 High
-
vyperlang vyper
Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments
CVE-2020-37287
Fix available
8.2 High
-
vyperlang vyper
Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops
CVE-2020-37288
Fix available
6.3 Medium
-
vyperlang vyper
Vyper's `slice()` may elide side-effects when output length is 0
CVE-2025-47774
2.9 Low
-
vyperlang vyper
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
CVE-2025-47285
2.9 Low
-
vyperlang vyper
sqrt doesn't define rounding behavior in Vyper
CVE-2025-26622
Fix available
2.3 Low
-
vyperlang vyper
double eval in For List Iter in Vyper
CVE-2025-27104
Fix available
2.3 Low
-
vyperlang vyper
AugAssign evaluation order causing OOB write within the object in Vyper
CVE-2025-27105
Fix available
2.3 Low
-
vyperlang vyper
Success of Certain Precompile Calls not Checked in Vyper
CVE-2025-21607
Fix available
2.3 Low
-
vyperlang vyper
vyper performs double eval of the argument of sqrt
CVE-2024-32649
Fix available
5.3 Medium
-
vyperlang vyper
vyper default functions don't respect nonreentrancy keys
CVE-2024-32648
Fix available
5.3 Medium
-
vyperlang vyper
vyper performs double eval of raw_args in create_from_blueprint
CVE-2024-32647
Fix available
5.3 Medium
-
vyperlang vyper
vyper performs double eval of the slice args when buffer from adhoc locations
CVE-2024-32646
Fix available
5.3 Medium
-
vyperlang vyper
vyper performs incorrect topic logging in raw_log
CVE-2024-32645
Fix available
5.3 Medium
-
vyperlang vyper
vyper's range(start, start + N) reverts for negative numbers
CVE-2024-32481
Fix available
5.3 Medium
-
vyperlang vyper
Vyper extract32 can ready dirty memory
CVE-2024-24564
Fix available
3.7 Low
-
vyperlang vyper
Vyper _abi_decode Memory Overflow
CVE-2024-26149
Fix available
3.7 Low
-
vyperlang vyper
Vyper array negative index vulnerability
CVE-2024-24563
Fix available
9.8 Critical
-
vyperlang vyper
Vyper SHA3 code generation bug
CVE-2024-24559
Fix available
3.7 Low
-
vyperlang vyper
Vyper external calls can overflow return data to return input buffer
CVE-2024-24560
Fix available
3.7 Low
-
vyperlang vyper
Vyper bounds check on built-in `slice()` function can be overflowed
CVE-2024-24561
Fix available
9.8 Critical
-
vyperlang vyper
raw_call `value=` kwargs not disabled for static and delegate calls
CVE-2024-24567
Fix available
4.8 Medium
-
vyperlang vyper
concat built-in can corrupt memory in vyper
CVE-2024-22419
Fix available
7.3 High
-
vyperlang vyper
Vyper has incorrect storage layout for contracts containing large arrays
CVE-2023-46247
Fix available
7.5 High
-
vyperlang vyper
_abi_decode input not validated in complex expressions in Vyper
CVE-2023-42460
Fix available
5.3 Medium
-
vyperlang vyper
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
CVE-2023-42443
Fix available
8.1 High
-
vyperlang vyper
Vyper has incorrect re-entrancy lock when key is empty string
CVE-2023-42441
Fix available
5.3 Medium
-
vyperlang vyper
Vyper: incorrect order of evaluation of side effects for some builtins
CVE-2023-41052
Fix available
3.7 Low
-
vyperlang vyper
Vyper: reversed order of side effects for some operations
CVE-2023-40015
Fix available
3.7 Low
-
vyperlang vyper
Vyper incorrectly allocated named re-entrancy locks
CVE-2023-39363
Fix available
9.1 Critical
-
vyperlang vyper
Vyper's ecrecover can return undefined data if signature does not verify
CVE-2023-37902
Fix available
5.3 Medium
-
vyperlang vyper
Nonpayable default functions are sometimes payable in vyper
CVE-2023-32675
Fix available
3.7 Low
-
vyperlang vyper
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
CVE-2023-32059
Fix available
7.5 High
-
vyperlang vyper
Vyper vulnerable to integer overflow in loop
CVE-2023-32058
Fix available
7.5 High
-
vyperlang vyper
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
CVE-2023-31146
Fix available
7.5 High
-
vyperlang vyper
Vyper storage allocator overflow
CVE-2023-30837
Fix available
7.5 High
-
vyperlang vyper
Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value
CVE-2023-30629
Fix available
7.5 High
-
vyperlang vyper
Multiple evaluation of contract address in call in vyper
CVE-2022-29255
Fix available
8.2 High
-
vyperlang vyper
Integer bounds error in Vyper
CVE-2022-24845
Fix available
8.8 High
-
vyperlang vyper
Buffer overflow in Vyper
CVE-2022-24788
Fix available
7.1 High
-
vyperlang vyper
Incorrect Comparison in Vyper
CVE-2022-24787
Fix available
7.5 High
-
vyperlang vyper
Memory corruption in Vyper
CVE-2021-41121
Fix available
7.5 High
-
vyperlang vyper
Bounds check missing for decimal args in Vyper
CVE-2021-41122
Fix available
4.3 Medium
-
vyperlang vyper
Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator
CVE-2021-48018
Fix available
8.3 High
- Show olderLoading…