Vyperlang vulnerabilities
53 CVEs and advisories name Vyperlang as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-24561Vyper bounds check on built-in `slice()` function can be overflowed
- CVE-2024-24567raw_call `value=` kwargs not disabled for static and delegate calls
- CVE-2024-22419concat built-in can corrupt memory in vyper
- CVE-2023-46247Vyper has incorrect storage layout for contracts containing large arrays
- CVE-2023-42460_abi_decode input not validated in complex expressions in Vyper
- CVE-2023-42443Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
- CVE-2023-42441Vyper has incorrect re-entrancy lock when key is empty string
- CVE-2023-40015Vyper: reversed order of side effects for some operations
- CVE-2023-41052Vyper: incorrect order of evaluation of side effects for some builtins
- CVE-2023-39363Vyper incorrectly allocated named re-entrancy locks
- CVE-2023-37902Vyper's ecrecover can return undefined data if signature does not verify
- CVE-2023-32675Nonpayable default functions are sometimes payable in vyper
- CVE-2023-32059Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
- CVE-2023-32058Vyper vulnerable to integer overflow in loop
- CVE-2023-31146Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
- CVE-2023-30837Vyper storage allocator overflow
- CVE-2023-30629Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value
- CVE-2022-29255Multiple evaluation of contract address in call in vyper
- CVE-2022-24845Integer bounds error in Vyper
- CVE-2022-24788Buffer overflow in Vyper
- CVE-2022-24787Incorrect Comparison in Vyper
- CVE-2021-41121Memory corruption in Vyper
- CVE-2021-41122Bounds check missing for decimal args in Vyper