PYSEC-2021-366

vendorUSosv

view advisory published 2021-10-05Licence: CC-BY-4.0

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-41122US	medium4.0	0.80% (56th)	—	2021-10-05
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic er…

references

External citations — patches, advisories, analysis.

https://github.com/vyperlang/vyper/pull/2447WEB
https://github.com/vyperlang/vyper/security/advisories/GHSA-c7pr-343r-5c46ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan