vyper vulnerabilities
CVEs whose affected-version data names the vyper package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
36 CVEsRSS
CVE-2023-31146High· 7.5Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
▾ Twilightvyper · vyperEPSS 1.2%via OSV
CVE-2023-30837High· 7.5vyper vulnerable to storage allocator overflow
vyper vulnerable to storage allocator overflow
▾ Twilightvyper · vyperEPSS 0.70%via OSV
CVE-2023-30629High· 7.5Incorrect success value returned in vyper
Incorrect success value returned in vyper
▾ Twilightvyper · vyperEPSS 0.88%via OSV
CVE-2021-41121High· 7.5Memory corruption when returning a literal struct with a private call inside of it
Memory corruption when returning a literal struct with a private call inside of it
▾ Twilightvyper · vyperEPSS 1.1%via OSV
CVE-2021-41122Medium· 4.3missing clamps for decimal args in external functions
missing clamps for decimal args in external functions
▾ Sunlitvyper · vyperEPSS 0.80%via OSV
CVE-2021-48018High· 7.4Storage corruption due to variables overwritten by re-entrancy locks
Storage corruption due to variables overwritten by re-entrancy locks
▾ Twilightvyper · vyperEPSS 0.39%via OSV