Vulnerability index

Browse CVEs

37 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vyper CRITICAL 9.1
CVE-2025-27105

vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double eval…

Fix: 0.4.1+
Fix from $2,300 2025-02-21
Vyper HIGH 7.5
CVE-2025-26622

vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the babylonian method to calculate square roots of decimals. Unf…

Fix: 0.4.1+
Fix from $1,950 2025-02-21
Vyper HIGH 7.5
CVE-2025-27104

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop.…

Fix: 0.4.1+
Fix from $1,950 2025-02-21
Vyper HIGH 7.5
CVE-2025-21607

Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success…

Fix: 0.4.1+
Fix from $1,950 2025-01-14
Vyper MEDIUM 5.3
CVE-2024-32648

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to version 0.3.0, default functions don't respect nonreentrancy k…

Fix: 0.3.0+
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-32649

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in do…

Fix: 0.4.0+
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-32645

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_…

Fix: 0.4.0+
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-32646

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `slice` builtin can result in a…

Fix: 0.4.0+
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-32647

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `create_from_blueprint` builtin…

Fix: 0.4.0+
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-32481

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping ov…

Fix: after 0.3.10
Fix from $1,600 2024-04-25
Vyper MEDIUM 5.3
CVE-2024-24564

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index pro…

Fix: 0.4.0+
Fix from $1,600 2024-02-26
Vyper MEDIUM 5.3
CVE-2024-26149

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an…

Fix: after 0.3.10
Fix from $1,600 2024-02-26
Vyper CRITICAL 9.8
CVE-2024-24563

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for uns…

Fix: after 0.3.10
Fix from $2,300 2024-02-07
Vyper MEDIUM 5.3
CVE-2024-24559

Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely,…

Fix: after 0.3.10
Fix from $1,600 2024-02-05
Vyper MEDIUM 5.3
CVE-2024-24560

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made, we write the input buffer st…

Fix: after 0.3.10
Fix from $1,600 2024-02-02
Vyper CRITICAL 9.8
CVE-2024-24561

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not ac…

Fix: after 0.3.10
Fix from $2,300 2024-02-01
Vyper MEDIUM 5.3
CVE-2024-24567

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin raw_call even if the c…

Fix: after 0.3.10
Fix from $1,600 2024-01-30
Vyper CRITICAL 9.8
CVE-2024-22419

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The `concat` built-in can write over the bounds of the memory buffer th…

Fix: after 0.3.10
Fix from $2,300 2024-01-18
Vyper HIGH 7.5
CVE-2023-46247

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contracts containing large arrays might underallocate the number …

Fix: 0.3.8+
Fix from $1,950 2023-12-13
Vyper HIGH 7.5
CVE-2023-42460

Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Use…

Fix: 0.3.10+
Fix from $1,950 2023-09-27
Vyper HIGH 8.1
CVE-2023-42443

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, the memory …

Fix: 0.3.10+
Fix from $1,950 2023-09-18
Vyper MEDIUM 5.3
CVE-2023-42441

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, locks of t…

Fix: 0.3.10+
Fix from $1,600 2023-09-18
Vyper MEDIUM 5.3
CVE-2023-41052

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`,…

Fix: after 0.3.9
Fix from $1,600 2023-09-04
Vyper MEDIUM 5.3
CVE-2023-40015

Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) list of expressions, the compiler evaluates the arguments fr…

Fix: after 0.3.9
Fix from $1,600 2023-09-04
Vyper MEDIUM 5.9
CVE-2023-39363

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are…

Patch available
Fix from $1,600 2023-08-07
Vyper MEDIUM 5.3
CVE-2023-37902

Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM). Prior to version 0.3.10, the ecrecover precompile does not …

Fix: 0.3.9+
Fix from $1,600 2023-07-25
Vyper MEDIUM 5.3
CVE-2023-32675

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is poss…

Fix: 0.3.8+
Fix from $1,600 2023-05-19
Vyper HIGH 7.5
CVE-2023-32059

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments are compi…

Fix: 0.3.8+
Fix from $1,950 2023-05-11
Vyper CRITICAL 9.1
CVE-2023-31146

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray i…

Fix: 0.3.8+
Fix from $2,300 2023-05-11
Vyper HIGH 7.5
CVE-2023-32058

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variable…

Fix: 0.3.8+
Fix from $1,950 2023-05-11