PYSEC-2023-76

vendorUSosv

view advisory published 2023-05-08Licence: CC-BY-4.0

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-30837US	high7.5	0.70% (53rd)	—	2023-05-08
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the…

references

External citations — patches, advisories, analysis.

https://github.com/vyperlang/vyper/commit/0bb7203b584e771b23536ba065a6efda457161bbFIX
https://github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan