vyper vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-47774Lowvyper: Vyper's `slice()` may elide side-effects when output length is 0 CVE-2025-47285Lowvyper: Vyper's `concat()` builtin may elide side-effects for zero-length arguments CVE-2025-27104Lowvyper: Vyper has a double eval in For List Iter CVE-2025-27105Lowvyper: AugAssign evaluation order causing OOB write within the object in Vyper CVE-2025-26622Lowvyper: Vyper's sqrt doesn't define rounding behavior CVE-2025-21607Lowvyper: Vyper Does Not Check the Success of Certain Precompile Calls CVE-2024-32481Mediumvyper: vyper's range(start, start + N) reverts for negative numbers CVE-2024-32645Mediumvyper: vyper performs incorrect topic logging in raw_log CVE-2024-32646Mediumvyper: vyper performs double eval of the slice start/length args in certain cases CVE-2024-32647Mediumvyper: vyper performs double eval of raw_args in create_from_blueprint CVE-2024-32648Mediumvyper: vyper default functions don't respect nonreentrancy keys CVE-2024-32649Mediumvyper: vyper performs multiple eval of `sqrt()` argument built in CVE-2024-24564Lowvyper: Vyper's `extract32` can ready dirty memory CVE-2024-26149Lowvyper: Vyper's `_abi_decode` vulnerable to Memory Overflow CVE-2024-24563Criticalvyper: Vyper negative array index bounds checks CVE-2024-24559Lowvyper: Vyper sha3 codegen bug CVE-2024-24560Lowvyper: Vyper's external calls can overflow return data to return input buffer CVE-2024-24561Criticalvyper: Vyper's bounds check on built-in `slice()` function can be overflowed CVE-2024-24567Mediumvyper: Vyper's raw_call `value=` kwargs not disabled for static and delegate calls CVE-2024-22419Highvyper: concat built-in can corrupt memory in vyper CVE-2023-46247Highvyper: incorrect storage layout for contracts containing large arrays CVE-2023-42460Mediumvyper: Vyper's `_abi_decode` input not validated in complex expressions CVE-2023-42443Highvyper: Vyper vulnerable to memory corruption in certain builtins utilizing `msize`CVE-2023-42441Mediumvyper: Vyper has incorrect re-entrancy lock when key is empty string CVE-2023-41052Mediumvyper: incorrect order of evaluation of side effects for some builtins

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.