Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2028
  • PyPI/vyper
Vyper's `slice()` may elide side-effects when output length is 0 07 Jul
  • No fix available
  • Severity - 2.9 (Low)
PYSEC-2026-2029
  • PyPI/vyper
Vyper's `concat()` builtin may elide side-effects for zero-length arguments 07 Jul
  • No fix available
  • Severity - 2.9 (Low)
GHSA-3vcg-j39x-cwfm
  • PyPI/vyper
Vyper's `slice()` may elide side-effects when output length is 0 16 May 2025
  • No fix available
  • Severity - 2.9 (Low)
GHSA-qhr6-mgqr-mchm
  • PyPI/vyper
Vyper's `concat()` builtin may elide side-effects for zero-length arguments 16 May 2025
  • No fix available
  • Severity - 2.9 (Low)
GHSA-h33q-mhmp-8p67
  • PyPI/vyper
Vyper has a double eval in For List Iter 21 Feb 2025
  • Fix available
  • Severity - 2.3 (Low)
GHSA-4w26-8p97-f4jp
  • PyPI/vyper
AugAssign evaluation order causing OOB write within the object in Vyper 21 Feb 2025
  • Fix available
  • Severity - 2.3 (Low)
GHSA-2p94-8669-xg86
  • PyPI/vyper
Vyper's sqrt doesn't define rounding behavior 21 Feb 2025
  • Fix available
  • Severity - 2.3 (Low)
PYSEC-2025-29
  • PyPI/vyper
See record for full details 21 Feb 2025
  • Fix available
PYSEC-2025-30
  • PyPI/vyper
See record for full details 21 Feb 2025
  • Fix available
PYSEC-2025-31
  • PyPI/vyper
See record for full details 21 Feb 2025
  • Fix available
PYSEC-2025-33
  • PyPI/vyper
See record for full details 14 Jan 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-vgf2-gvx8-xwc3
  • PyPI/vyper
Vyper Does Not Check the Success of Certain Precompile Calls 14 Jan 2025
  • No fix available
  • Severity - 2.3 (Low)
GHSA-ppx5-q359-pvwj
  • PyPI/vyper
vyper's range(start, start + N) reverts for negative numbers 25 Apr 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-xchq-w5r3-4wg3
  • PyPI/vyper
vyper performs incorrect topic logging in raw_log 25 Apr 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-r56x-j438-vw5m
  • PyPI/vyper
vyper performs double eval of the slice start/length args in certain cases 25 Apr 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-3whq-64q2-qfj6
  • PyPI/vyper
vyper performs double eval of raw_args in create_from_blueprint 25 Apr 2024
  • Fix available
  • Severity - 5.3 (Medium)