Browse CVEs

CRITICAL 9.1 CVE-2025-27105 vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double eval… Vyper 0.4.1+ Fix from $2,3002025-02-21 HIGH 7.5 CVE-2025-26622 vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the babylonian method to calculate square roots of decimals. Unf… Vyper 0.4.1+ Fix from $1,9502025-02-21 HIGH 7.5 CVE-2025-27104 vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop.… Vyper 0.4.1+ Fix from $1,9502025-02-21 HIGH 7.5 CVE-2025-21607 Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success… Vyper 0.4.1+ Fix from $1,9502025-01-14 MEDIUM 5.3 CVE-2024-32648 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to version 0.3.0, default functions don't respect nonreentrancy k… Vyper 0.3.0+ Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-32649 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in do… Vyper 0.4.0+ Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-32645 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_… Vyper 0.4.0+ Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-32646 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `slice` builtin can result in a… Vyper 0.4.0+ Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-32647 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `create_from_blueprint` builtin… Vyper 0.4.0+ Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-32481 Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping ov… Vyper after 0.3.10 Fix from $1,6002024-04-25 MEDIUM 5.3 CVE-2024-24564 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index pro… Vyper 0.4.0+ Fix from $1,6002024-02-26 MEDIUM 5.3 CVE-2024-26149 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an… Vyper after 0.3.10 Fix from $1,6002024-02-26 CRITICAL 9.8 CVE-2024-24563 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for uns… Vyper after 0.3.10 Fix from $2,3002024-02-07 MEDIUM 5.3 CVE-2024-24559 Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely,… Vyper after 0.3.10 Fix from $1,6002024-02-05 MEDIUM 5.3 CVE-2024-24560 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made, we write the input buffer st… Vyper after 0.3.10 Fix from $1,6002024-02-02 CRITICAL 9.8 CVE-2024-24561 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not ac… Vyper after 0.3.10 Fix from $2,3002024-02-01 MEDIUM 5.3 CVE-2024-24567 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin raw_call even if the c… Vyper after 0.3.10 Fix from $1,6002024-01-30 CRITICAL 9.8 CVE-2024-22419 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The `concat` built-in can write over the bounds of the memory buffer th… Vyper after 0.3.10 Fix from $2,3002024-01-18 HIGH 7.5 CVE-2023-46247 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contracts containing large arrays might underallocate the number … Vyper 0.3.8+ Fix from $1,9502023-12-13 HIGH 7.5 CVE-2023-42460 Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Use… Vyper 0.3.10+ Fix from $1,9502023-09-27 HIGH 8.1 CVE-2023-42443 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, the memory … Vyper 0.3.10+ Fix from $1,9502023-09-18 MEDIUM 5.3 CVE-2023-42441 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, locks of t… Vyper 0.3.10+ Fix from $1,6002023-09-18 MEDIUM 5.3 CVE-2023-41052 Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`,… Vyper after 0.3.9 Fix from $1,6002023-09-04 MEDIUM 5.3 CVE-2023-40015 Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) list of expressions, the compiler evaluates the arguments fr… Vyper after 0.3.9 Fix from $1,6002023-09-04 MEDIUM 5.9 CVE-2023-39363 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are… Vyper Patch available Fix from $1,6002023-08-07 MEDIUM 5.3 CVE-2023-37902 Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM). Prior to version 0.3.10, the ecrecover precompile does not … Vyper 0.3.9+ Fix from $1,6002023-07-25 MEDIUM 5.3 CVE-2023-32675 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is poss… Vyper 0.3.8+ Fix from $1,6002023-05-19 HIGH 7.5 CVE-2023-32059 Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments are compi… Vyper 0.3.8+ Fix from $1,9502023-05-11 CRITICAL 9.1 CVE-2023-31146 Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray i… Vyper 0.3.8+ Fix from $2,3002023-05-11 HIGH 7.5 CVE-2023-32058 Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variable… Vyper 0.3.8+ Fix from $1,9502023-05-11