vyperlang vyper

• CVE-2026-114663 High 8.4 Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments 0.2%
• CVE-2026-114118 Medium 4.8 Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound 0.2%
• CVE-2026-114117 Medium 5.9 Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches 0.3%
• CVE-2026-114116 Medium 5.3 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators 0.3%
• CVE-2026-114115 Low 3.7 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection 0.3%
• CVE-2026-114114 Medium 5.3 Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters 0.3%
• CVE-2021-48020 Medium 6.5 Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays 0.3%
• CVE-2021-48019 Medium 4.8 Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies 0.2%
• CVE-2021-48018 High 7.4 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator 0.4%
• CVE-2020-37289 Low 3.7 Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values 0.3%
• CVE-2020-37288 Low 3.7 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops 0.3%
• CVE-2020-37287 Medium 5.9 Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments 0.3%
• CVE-2020-37286 Medium 6.5 Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls 0.3%
• CVE-2025-47774 Low 2.9 Vyper's `slice()` may elide side-effects when output length is 0 0.5%
• CVE-2025-47285 Low 2.9 Vyper's `concat()` builtin may elide side-effects for zero-length arguments 0.5%
• CVE-2025-26622 High 7.5 sqrt doesn't define rounding behavior in Vyper 0.3%
• CVE-2025-27104 High 7.5 double eval in For List Iter in Vyper 0.4%
• CVE-2025-27105 Critical 9.1 AugAssign evaluation order causing OOB write within the object in Vyper 0.6%
• CVE-2025-21607 Low 2.3 Success of Certain Precompile Calls not Checked in Vyper 0.7%
• CVE-2024-32649 Medium 5.3 vyper performs double eval of the argument of sqrt 0.5%
• CVE-2024-32648 Medium 5.3 vyper default functions don't respect nonreentrancy keys 0.4%
• CVE-2024-32647 Medium 5.3 vyper performs double eval of raw_args in create_from_blueprint 0.5%
• CVE-2024-32646 Medium 5.3 vyper performs double eval of the slice args when buffer from adhoc locations 0.5%
• CVE-2024-32645 Medium 5.3 vyper performs incorrect topic logging in raw_log 0.5%
• CVE-2024-32481 Medium 5.3 vyper's range(start, start + N) reverts for negative numbers 0.8%
• CVE-2024-24564 Low 3.7 Vyper extract32 can ready dirty memory 0.6%
• CVE-2024-26149 Low 3.7 Vyper _abi_decode Memory Overflow 0.5%
• CVE-2024-24563 Critical 9.8 Vyper array negative index vulnerability 1.5%
• CVE-2024-24559 Low 3.7 Vyper SHA3 code generation bug 0.3%
• CVE-2024-24560 Low 3.7 Vyper external calls can overflow return data to return input buffer 0.5%
• CVE-2024-24561 Critical 9.8 Vyper bounds check on built-in `slice()` function can be overflowed 0.9%
• CVE-2024-24567 Medium 4.8 raw_call `value=` kwargs not disabled for static and delegate calls 0.5%
• CVE-2024-22419 High 7.3 concat built-in can corrupt memory in vyper 0.8%
• CVE-2023-46247 High 7.5 Vyper has incorrect storage layout for contracts containing large arrays 0.7%
• CVE-2023-42460 Medium 5.3 _abi_decode input not validated in complex expressions in Vyper 0.7%
• CVE-2023-42443 High 8.1 Vyper vulnerable to memory corruption in certain builtins utilizing `msize` 0.8%
• CVE-2023-42441 Medium 5.3 Vyper has incorrect re-entrancy lock when key is empty string 0.5%
• CVE-2023-40015 Low 3.7 Vyper: reversed order of side effects for some operations 0.5%
• CVE-2023-41052 Low 3.7 Vyper: incorrect order of evaluation of side effects for some builtins 0.5%
• CVE-2023-39363 Critical 9.1 Vyper incorrectly allocated named re-entrancy locks 0.8%
• CVE-2023-37902 Medium 5.3 Vyper's ecrecover can return undefined data if signature does not verify 0.6%
• CVE-2023-32675 Low 3.7 Nonpayable default functions are sometimes payable in vyper 0.6%
• CVE-2023-32059 High 7.5 Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls 0.7%
• CVE-2023-32058 High 7.5 Vyper vulnerable to integer overflow in loop 0.9%
• CVE-2023-31146 High 7.5 Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment 1.3%
• CVE-2023-30837 High 7.5 Vyper storage allocator overflow 0.7%
• CVE-2023-30629 High 7.5 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value 0.9%
• CVE-2022-29255 High 8.2 Multiple evaluation of contract address in call in vyper 1.3%
• CVE-2022-24845 High 8.8 Integer bounds error in Vyper 1.4%
• CVE-2022-24788 High 7.1 Buffer overflow in Vyper 1.0%