vyper

MEDIUM 5.3

PyPI

CVE-2024-32481

vyper's range(start, start + N) reverts for negative numbers

Apr 25, 2024

HIGH 7.5

PyPI

CVE-2025-21607

CVE-2025-21607

Jan 14, 2025

MEDIUM 5.3

PyPI

CVE-2024-32649

CVE-2024-32649

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32649

vyper performs multiple eval of `sqrt()` argument built in

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-26149

CVE-2024-26149

Feb 26, 2024

UNKNOWN

PyPI

CVE-2025-21607

Vyper Does Not Check the Success of Certain Precompile Calls

Jan 14, 2025

MEDIUM 5.3

PyPI

CVE-2024-32646

vyper performs double eval of the slice start/length args in certain cases

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32645

CVE-2024-32645

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32647

vyper performs double eval of raw_args in create_from_blueprint

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32648

vyper default functions don't respect nonreentrancy keys

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32647

CVE-2024-32647

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32646

CVE-2024-32646

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32645

vyper performs incorrect topic logging in raw_log

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32648

CVE-2024-32648

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-32481

CVE-2024-32481

Apr 25, 2024

MEDIUM 5.3

PyPI

CVE-2024-24564

CVE-2024-24564

Feb 26, 2024

LOW 3.7

PyPI

CVE-2024-24564

Vyper's `extract32` can ready dirty memory

Feb 26, 2024

LOW 3.7

PyPI

CVE-2024-26149

Vyper's `_abi_decode` vulnerable to Memory Overflow

Feb 26, 2024

HIGH 7.5

PyPI

CVE-2021-41121

Memory corruption when returning a literal struct with a private call inside of it

Oct 12, 2021

MEDIUM 4.3

PyPI

CVE-2021-41122

missing clamps for decimal args in external functions

Oct 6, 2021

LOW 3.7

PyPI

CVE-2023-32675

Vyper's nonpayable default functions are sometimes payable

May 22, 2023

UNKNOWN

PyPI

CVE-2023-32675

CVE-2023-32675

May 19, 2023

MEDIUM 5.9

PyPI

CVE-2023-39363

CVE-2023-39363

Aug 7, 2023

MEDIUM 5.3

PyPI

CVE-2023-40015

Vyper: reversed order of side effects for some operations

Sep 4, 2023

UNKNOWN

PyPI

CVE-2025-47774

Vyper's `slice()` may elide side-effects when output length is 0

May 16, 2025

UNKNOWN

PyPI

CVE-2025-47285

Vyper's `concat()` builtin may elide side-effects for zero-length arguments

May 16, 2025

UNKNOWN

PyPI

CVE-2025-26622

Vyper's sqrt doesn't define rounding behavior

Feb 21, 2025

UNKNOWN

PyPI

CVE-2025-27104

Vyper has a double eval in For List Iter

Feb 21, 2025

UNKNOWN

PyPI

CVE-2025-27105

AugAssign evaluation order causing OOB write within the object in Vyper

Feb 21, 2025

UNKNOWN

PyPI

CVE-2025-26622

CVE-2025-26622

Feb 21, 2025

UNKNOWN

PyPI

CVE-2025-27105

CVE-2025-27105

Feb 21, 2025

UNKNOWN

PyPI

CVE-2025-27104

CVE-2025-27104

Feb 21, 2025

HIGH 7.5

PyPI

CVE-2022-24787

Incorrect Comparison in Vyper

Apr 4, 2022

UNKNOWN

PyPI

GHSA-375m-5fvv-xq23

VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption

Apr 19, 2021

UNKNOWN

PyPI

GHSA-22wc-c9wj-6q2v

VVE-2021-0001: Memory corruption using function calls within arrays

Apr 19, 2021

UNKNOWN

PyPI

GHSA-7f92-rr6w-cq64

Storage corruption due to variables overwritten by re-entrancy locks

Aug 5, 2021

UNKNOWN

PyPI

GHSA-mr6r-mvw4-736g

Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used

Mar 25, 2020

LOW 3.7

PyPI

CVE-2024-24559

Vyper sha3 codegen bug

Feb 5, 2024

CRITICAL 9.8

PyPI

CVE-2024-24563

Vyper negative array index bounds checks

Feb 7, 2024

MEDIUM 4.8

PyPI

CVE-2024-24567

Vyper's raw_call `value=` kwargs not disabled for static and delegate calls

Jan 30, 2024

LOW 3.7

PyPI

CVE-2024-24560

Vyper's external calls can overflow return data to return input buffer

Feb 2, 2024

CRITICAL 9.8

PyPI

CVE-2024-24561

Vyper's bounds check on built-in `slice()` function can be overflowed

Feb 1, 2024

HIGH 7.5

PyPI

CVE-2023-46247

incorrect storage layout for contracts containing large arrays

Dec 13, 2023

MEDIUM 5.3

PyPI

CVE-2023-42441

Vyper has incorrect re-entrancy lock when key is empty string

Sep 18, 2023

HIGH 8.1

PyPI

CVE-2023-42443

Vyper vulnerable to memory corruption in certain builtins utilizing `msize`

Sep 20, 2023

HIGH 8.1

PyPI

CVE-2023-42443

CVE-2023-42443

Sep 18, 2023

HIGH 7.5

PyPI

CVE-2023-46247

CVE-2023-46247

Dec 13, 2023

MEDIUM 5.3

PyPI

CVE-2023-42441

CVE-2023-42441

Sep 18, 2023

CRITICAL 9.8

PyPI

CVE-2024-24563

CVE-2024-24563

Feb 7, 2024

MEDIUM 5.3

PyPI

CVE-2024-24567

CVE-2024-24567

Jan 30, 2024

MEDIUM 5.3

PyPI

CVE-2024-24560

CVE-2024-24560

Feb 2, 2024

MEDIUM 5.3

PyPI

CVE-2024-24559

CVE-2024-24559

Feb 5, 2024

CRITICAL 9.8

PyPI

CVE-2024-24561

CVE-2024-24561

Feb 1, 2024

MEDIUM 5.3

PyPI

CVE-2023-42460

Vyper's `_abi_decode` input not validated in complex expressions

Sep 26, 2023

MEDIUM 5.3

PyPI

CVE-2023-41052

incorrect order of evaluation of side effects for some builtins

Sep 4, 2023

MEDIUM 5.3

PyPI

CVE-2023-37902

ecrecover can return undefined data if signature does not verify

Jul 25, 2023

HIGH 7.5

PyPI

CVE-2023-32058

Vyper vulnerable to integer overflow in loop

May 12, 2023

HIGH 7.5

PyPI

CVE-2023-31146

Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment

May 12, 2023

HIGH 7.5

PyPI

CVE-2023-30837

vyper vulnerable to storage allocator overflow

May 5, 2023

HIGH 7.5

PyPI

CVE-2023-30629

Incorrect success value returned in vyper

Apr 24, 2023

HIGH 7.5

PyPI

CVE-2023-32059

Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls

May 12, 2023

HIGH 7.1

PyPI

CVE-2022-24788

Buffer Overflow in vyper

Apr 20, 2022

HIGH 7.5

PyPI

CVE-2022-29255

Multiple evaluation of contract address in call in vyper

Jun 6, 2022

HIGH 8.7

PyPI

CVE-2023-39363

Vyper has incorrectly allocated named re-entrancy locks

Aug 9, 2023

HIGH 7.3

PyPI

CVE-2024-22419

concat built-in can corrupt memory in vyper

Jan 19, 2024

CRITICAL 9.8

PyPI

CVE-2024-22419

CVE-2024-22419

Jan 18, 2024

HIGH 7.5

PyPI

CVE-2023-42460

CVE-2023-42460

Sep 27, 2023

MEDIUM 5.3

PyPI

CVE-2023-41052

CVE-2023-41052

Sep 4, 2023

MEDIUM 5.3

PyPI

CVE-2023-40015

CVE-2023-40015

Sep 4, 2023

MEDIUM 5.3

PyPI

CVE-2023-37902

CVE-2023-37902

Jul 25, 2023

UNKNOWN

PyPI

CVE-2023-32059

CVE-2023-32059

May 11, 2023

UNKNOWN

PyPI

CVE-2023-32058

CVE-2023-32058

May 11, 2023

UNKNOWN

PyPI

CVE-2023-31146

CVE-2023-31146

May 11, 2023

UNKNOWN

PyPI

CVE-2023-30837

CVE-2023-30837

May 8, 2023

HIGH 7.5

PyPI

CVE-2023-30629

CVE-2023-30629

Apr 24, 2023

HIGH 7.5

PyPI

CVE-2022-29255

CVE-2022-29255

Jun 9, 2022

UNKNOWN

PyPI

CVE-2022-24845

CVE-2022-24845

Apr 13, 2022

HIGH 8.8

PyPI

CVE-2022-24845

Integer bounds error in Vyper

Apr 22, 2022

UNKNOWN

PyPI

CVE-2022-24788

CVE-2022-24788

Apr 13, 2022

UNKNOWN

PyPI

CVE-2022-24787

CVE-2022-24787

Apr 4, 2022

UNKNOWN

PyPI

CVE-2021-41122

CVE-2021-41122

Oct 5, 2021

UNKNOWN

PyPI

CVE-2021-41121

CVE-2021-41121

Oct 6, 2021