Medium
ghsa-rqr8-pxh7-cq3g
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
CVE-2023-42460
Vyper's `_abi_decode` input not validated in complex expressions
High
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Medium
CVE-2023-42441
Vyper has incorrect re-entrancy lock when key is empty string
Medium
CVE-2023-41052
incorrect order of evaluation of side effects for some builtins
Medium
CVE-2023-40015
Vyper: reversed order of side effects for some operations
Critical
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Medium
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Medium
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
High
CVE-2023-32059
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
High
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
High
CVE-2023-31146
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
High
CVE-2023-30837
vyper vulnerable to storage allocator overflow
High
CVE-2023-30629
Incorrect success value returned in vyper
High
CVE-2022-29255
Multiple evaluation of contract address in call in vyper
High
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
High
CVE-2022-24788
Buffer Overflow in vyper
High
CVE-2022-24787
Incorrect Comparison in Vyper
High
CVE-2021-41121
Memory corruption when returning a literal struct with a private call inside of it
Medium
CVE-2021-41122
missing clamps for decimal args in external functions
High
ghsa-7f92-rr6w-cq64
Storage corruption due to variables overwritten by re-entrancy locks
Medium
ghsa-22wc-c9wj-6q2v
VVE-2021-0001: Memory corruption using function calls within arrays
Low
ghsa-375m-5fvv-xq23
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Low
ghsa-mr6r-mvw4-736g
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.