Vvyperlang

Products

Exploited and recent CVEs

• CVE-2026-114663 High 8.4 Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments 0.2%
• CVE-2026-114118 Medium 4.8 Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound 0.2%
• CVE-2026-114117 Medium 5.9 Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches 0.3%
• CVE-2026-114116 Medium 5.3 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators 0.3%
• CVE-2026-114115 Low 3.7 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection 0.3%
• CVE-2026-114114 Medium 5.3 Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters 0.3%
• CVE-2021-48020 Medium 6.5 Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays 0.3%
• CVE-2021-48019 Medium 4.8 Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies 0.2%
• CVE-2021-48018 High 7.4 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator 0.4%
• CVE-2020-37289 Low 3.7 Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values 0.3%
• CVE-2020-37288 Low 3.7 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops 0.3%
• CVE-2020-37287 Medium 5.9 Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments 0.3%
• CVE-2020-37286 Medium 6.5 Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls 0.3%
• CVE-2025-47774 Low 2.9 Vyper's `slice()` may elide side-effects when output length is 0 0.5%
• CVE-2025-47285 Low 2.9 Vyper's `concat()` builtin may elide side-effects for zero-length arguments 0.5%
• CVE-2025-26622 High 7.5 sqrt doesn't define rounding behavior in Vyper 0.3%
• CVE-2025-27104 High 7.5 double eval in For List Iter in Vyper 0.4%
• CVE-2025-27105 Critical 9.1 AugAssign evaluation order causing OOB write within the object in Vyper 0.6%
• CVE-2025-21607 Low 2.3 Success of Certain Precompile Calls not Checked in Vyper 0.7%
• CVE-2024-32649 Medium 5.3 vyper performs double eval of the argument of sqrt 0.5%
• CVE-2024-32648 Medium 5.3 vyper default functions don't respect nonreentrancy keys 0.4%
• CVE-2024-32647 Medium 5.3 vyper performs double eval of raw_args in create_from_blueprint 0.5%
• CVE-2024-32646 Medium 5.3 vyper performs double eval of the slice args when buffer from adhoc locations 0.5%
• CVE-2024-32645 Medium 5.3 vyper performs incorrect topic logging in raw_log 0.5%
• CVE-2024-32481 Medium 5.3 vyper's range(start, start + N) reverts for negative numbers 0.8%
• CVE-2024-24564 Low 3.7 Vyper extract32 can ready dirty memory 0.6%
• CVE-2024-26149 Low 3.7 Vyper _abi_decode Memory Overflow 0.5%
• CVE-2024-24563 Critical 9.8 Vyper array negative index vulnerability 1.5%
• CVE-2024-24559 Low 3.7 Vyper SHA3 code generation bug 0.3%
• CVE-2024-24560 Low 3.7 Vyper external calls can overflow return data to return input buffer 0.5%