VY
Product
vyper
by vyperlang · last CVE Oct 22, 2026
53
CVEs
0
On KEV
9.8
Max CVSS
13
New 30D
Severity mix
Critical 7High 15Medium 26Low 5
Watch

Add vyper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-41121
8.8
1%
Oct 6
Vyper is a Pythonic Smart Contract Language for the EVM
Affected: before 0.3.0
CVE-2026-114663
8.4
0%
Oct 22
Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments
Affected: 0.4.0b1 through 0.5.0b1
CVE-2023-42443
8.1
1%
Sep 18
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Affected: <= 0.3.9
CVE-2025-26622
7.5
0%
Feb 21
sqrt doesn't define rounding behavior in Vyper
Affected: < 0.4.1
CVE-2025-27104
7.5
0%
Feb 21
double eval in For List Iter in Vyper
Affected: < 0.4.1
CVE-2025-21607
7.5
1%
Jan 14
Success of Certain Precompile Calls not Checked in Vyper
Affected: < 0.4.1
CVE-2023-46247
7.5
1%
Dec 13
Vyper has incorrect storage layout for contracts containing large arrays
Affected: < 0.3.8
CVE-2023-42460
7.5
1%
Sep 26
_abi_decode input not validated in complex expressions in Vyper
Affected: >= 0.3.4, < 0.3.10
CVE-2023-32059
7.5
1%
May 11
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
Affected: < 0.3.8
CVE-2023-32058
7.5
1%
May 11
Vyper vulnerable to integer overflow in loop
Affected: < 0.3.8
CVE-2023-30837
7.5
1%
May 8
Vyper storage allocator overflow
Affected: < 0.3.8
CVE-2023-30629
7.5
1%
Apr 24
Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value
Affected: >= 0.3.1, <= 0.3.7
CVE-2022-29255
7.5
1%
Jun 9
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine
Affected: before 0.3.4
CVE-2022-24787
7.5
1%
Apr 4
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine
Affected: through 0.3.1
CVE-2021-48018
7.4
0%
Oct 21
Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator
Affected: 0.2.13 before 0.2.15
Showing 15