VY
Vendor
vyperlang
53
CVEs
0
On KEV
13
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114663 | VY vyper vyperlang | 8.4 | Oct 22 | Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments |
| CVE-2026-114118 | VY vyper vyperlang | 4.8 | Oct 21 | Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound |
| CVE-2026-114117 | VY vyper vyperlang | 5.9 | Oct 21 | Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches |
| CVE-2026-114116 | VY vyper vyperlang | 5.3 | Oct 21 | Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators |
| CVE-2026-114115 | VY vyper vyperlang | 3.7 | Oct 21 | Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection |
| CVE-2026-114114 | VY vyper vyperlang | 5.3 | Oct 21 | Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters |
| CVE-2021-48020 | VY vyper vyperlang | 6.5 | Oct 21 | Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays |
| CVE-2021-48019 | VY vyper vyperlang | 4.8 | Oct 21 | Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies |
| CVE-2021-48018 | VY vyper vyperlang | 7.4 | Oct 21 | Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator |
| CVE-2020-37289 | VY vyper vyperlang | 3.7 | Oct 21 | Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values |
| CVE-2020-37288 | VY vyper vyperlang | 3.7 | Oct 21 | Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops |
| CVE-2020-37287 | VY vyper vyperlang | 5.9 | Oct 21 | Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments |
| CVE-2020-37286 | VY vyper vyperlang | 6.5 | Oct 21 | Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls |
| CVE-2025-47774 | VY vyper vyperlang | 2.9 | May 15 | Vyper's `slice()` may elide side-effects when output length is 0 |
| CVE-2025-47285 | VY vyper vyperlang | 2.9 | May 15 | Vyper's `concat()` builtin may elide side-effects for zero-length arguments |
| CVE-2025-26622 | VY vyper vyperlang | 7.5 | Feb 21 | sqrt doesn't define rounding behavior in Vyper |
| CVE-2025-27104 | VY vyper vyperlang | 7.5 | Feb 21 | double eval in For List Iter in Vyper |
| CVE-2025-27105 | VY vyper vyperlang | 9.1 | Feb 21 | AugAssign evaluation order causing OOB write within the object in Vyper |
| CVE-2025-21607 | VY vyper vyperlang | 7.5 | Jan 14 | Success of Certain Precompile Calls not Checked in Vyper |
| CVE-2024-32649 | VY vyper vyperlang | 5.3 | Apr 25 | vyper performs double eval of the argument of sqrt |
| CVE-2024-32648 | VY vyper vyperlang | 5.3 | Apr 25 | vyper default functions don't respect nonreentrancy keys |
| CVE-2024-32647 | VY vyper vyperlang | 5.3 | Apr 25 | vyper performs double eval of raw_args in create_from_blueprint |
| CVE-2024-32646 | VY vyper vyperlang | 5.3 | Apr 25 | vyper performs double eval of the slice args when buffer from adhoc locations |
| CVE-2024-32645 | VY vyper vyperlang | 5.3 | Apr 25 | vyper performs incorrect topic logging in raw_log |
| CVE-2024-32481 | VY vyper vyperlang | 5.3 | Apr 25 | vyper's range(start, start + N) reverts for negative numbers |
| CVE-2024-24564 | VY vyper vyperlang | 5.3 | Feb 26 | Vyper extract32 can ready dirty memory |
| CVE-2024-26149 | VY vyper vyperlang | 5.3 | Feb 26 | Vyper _abi_decode Memory Overflow |
| CVE-2024-24563 | VY vyper vyperlang | 9.8 | Feb 7 | Vyper array negative index vulnerability |
| CVE-2024-24559 | VY vyper vyperlang | 5.3 | Feb 5 | Vyper SHA3 code generation bug |
| CVE-2024-24560 | VY vyper vyperlang | 5.3 | Feb 2 | Vyper external calls can overflow return data to return input buffer |
| CVE-2024-24561 | VY vyper vyperlang | 9.8 | Feb 1 | Vyper bounds check on built-in `slice()` function can be overflowed |
| CVE-2024-24567 | VY vyper vyperlang | 5.3 | Jan 30 | raw_call `value=` kwargs not disabled for static and delegate calls |
| CVE-2024-22419 | VY vyper vyperlang | 9.8 | Jan 18 | concat built-in can corrupt memory in vyper |
| CVE-2023-46247 | VY vyper vyperlang | 7.5 | Dec 13 | Vyper has incorrect storage layout for contracts containing large arrays |
| CVE-2023-42460 | VY vyper vyperlang | 7.5 | Sep 26 | _abi_decode input not validated in complex expressions in Vyper |
| CVE-2023-42443 | VY vyper vyperlang | 8.1 | Sep 18 | Vyper vulnerable to memory corruption in certain builtins utilizing `msize` |
| CVE-2023-42441 | VY vyper vyperlang | 5.3 | Sep 18 | Vyper has incorrect re-entrancy lock when key is empty string |
| CVE-2023-40015 | VY vyper vyperlang | 5.3 | Sep 4 | Vyper: reversed order of side effects for some operations |
| CVE-2023-41052 | VY vyper vyperlang | 5.3 | Sep 4 | Vyper: incorrect order of evaluation of side effects for some builtins |
| CVE-2023-39363 | VY vyper vyperlang | 5.9 | Aug 7 | Vyper incorrectly allocated named re-entrancy locks |
| CVE-2023-37902 | VY vyper vyperlang | 5.3 | Jul 25 | Vyper's ecrecover can return undefined data if signature does not verify |
| CVE-2023-32675 | VY vyper vyperlang | 5.3 | May 19 | Nonpayable default functions are sometimes payable in vyper |
| CVE-2023-32059 | VY vyper vyperlang | 7.5 | May 11 | Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls |
| CVE-2023-32058 | VY vyper vyperlang | 7.5 | May 11 | Vyper vulnerable to integer overflow in loop |
| CVE-2023-31146 | VY vyper vyperlang | 9.1 | May 11 | Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment |
| CVE-2023-30837 | VY vyper vyperlang | 7.5 | May 8 | Vyper storage allocator overflow |
| CVE-2023-30629 | VY vyper vyperlang | 7.5 | Apr 24 | Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value |
| CVE-2022-29255 | VY Vyper Vyperlang | 7.5 | Jun 9 | Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine |
| CVE-2022-24845 | VY Vyper Vyperlang | 9.8 | Apr 13 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine |
| CVE-2022-24788 | VY Vyper Vyperlang | 9.8 | Apr 13 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine |
| CVE-2022-24787 | VY Vyper Vyperlang | 7.5 | Apr 4 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine |
| CVE-2021-41121 | VY Vyper Vyperlang | 8.8 | Oct 6 | Vyper is a Pythonic Smart Contract Language for the EVM |
| CVE-2021-41122 | VY Vyper Vyperlang | 4.3 | Oct 5 | Vyper is a Pythonic Smart Contract Language for the EVM |