ethereum web3.py

• CVE-2026-111171 Medium 5.4 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass 0.3%
• CVE-2026-40072 Low 1.7 web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling 0.2%