Medium
ghsa-2r3x-4mrv-mcxf
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
ghsa-4v7v-gqf9-ww2g
Vyper: Call stack corruption when passing complex type containing non-base type members as argument
Medium
ghsa-vg88-3v92-rjx2
Vyper: Return inside for loop more than 1 level deep
Low
CVE-2025-47285
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Low
CVE-2025-47774
Vyper's `slice()` may elide side-effects when output length is 0
Low
CVE-2025-26622
Vyper's sqrt doesn't define rounding behavior
Low
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
Low
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Medium
CVE-2024-32645
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage argum
Medium
CVE-2024-32649
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in double eval vulnerability when the argument has side-
Medium
CVE-2024-32648
vyper default functions don't respect nonreentrancy keys
Medium
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Medium
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Medium
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Critical
CVE-2024-24563
Vyper negative array index bounds checks
Low
CVE-2024-24559
Vyper sha3 codegen bug
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
High
CVE-2024-22419
concat built-in can corrupt memory in vyper
High
CVE-2023-46247
incorrect storage layout for contracts containing large arrays
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.