VulertSecurity VulertSecurity

Vulnerability Database · PyPI · vyper · Version

vyper 0.4.2rc1

0.4.2rc1 is affected by 20 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 0.4.3.

Critical 1 High 2 Medium 5 Low 6 Unrated 6

All vyper versions & vulnerabilities → Source repository Search the database for this package →
Released 02 May 2025 Licence Apache-2.0 Also known from other sources 7 Newer releases 78 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

vyper 0.4.2rc1 vulnerabilities

20 vulnerabilities cover vyper 0.4.2rc1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2024-22419: Vyper Buffer Overflow Vulnerability in concat Function 9.8 critical 55e18f6d128b2da8986adbbcccf1cd59a4b9ad6f 18 Jan 2024
CVE-2023-30629: Vyper - Incorrect Bytecode Generation 7.5 high 851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae 24 Apr 2023
CVE-2022-29255: Vyper - Incorrect Evaluation of Contract Address 7.5 high 6b4d8ff185de071252feaa1c319712b2d6577f8d 09 Jun 2022
CVE-2023-39363: Vyper - Incorrect Allocation of Named Re-Entrancy Locks 5.9 medium No fix published 07 Aug 2023
CVE-2024-32648: Vyper Package Non-Reentrancy Key Bypass in Default Functions 5.3 medium 93287e5ac184b53b395c907d40701f721daf8177 25 Apr 2024
CVE-2024-24564: Vyper Package Vulnerability in extract32 Function Leading to Potential Memory Exposure 5.3 medium 3d9c537142fb99b2672f21e2057f5f202cde194f 26 Feb 2024
CVE-2023-40015: Vyper - Reversed Order of Side Effects Vulnerability 5.3 medium No fix published 04 Sep 2023
CVE-2023-37902: Vyper - Signature Verification Bypass 5.3 medium 019a37ab98ff53f04fecfadf602b6cd5ac748f7f 25 Jul 2023
CVE-2025-47285: Vyper Package - Side-Effect Elision in concat() Builtin for Zero-Length Arguments 2.9 low No fix published 07 Jul 2026
CVE-2025-47774: Vyper Package Slice Function Elides Side-Effects with Zero Length Output 2.9 low No fix published 07 Jul 2026
CVE-2025-47774: Vyper Package Slice Function Elides Side Effects 2.9 low No fix published 16 May 2025
CVE-2025-47285: Vyper Package - Side Effects Elision in concat() for Zero-Length Arguments 2.9 low No fix published 16 May 2025
CVE-2025-21607: Vyper Compiler Vulnerability in Precompile Calls 2.3 low No fix published 14 Jan 2025
CVE-2023-32675: Vyper Package Default Function Vulnerability N/A unrated 02339dfda0f3caabad142060d511d10bfe93c520. 19 May 2023
CVE-2023-31146: Vyper - Out-of-Bounds Array Access N/A unrated 4f8289a81206f767df1900ac48f485d90fc87edb 11 May 2023
CVE-2023-32058: Vyper - Overflow Vulnerability N/A unrated 3de1415ee77a9244eb04bdb695e249d3ec9ed868 11 May 2023
CVE-2022-24845: Vyper - Integer Misinterpretation Vulnerability N/A unrated 049dbdc647b2ce838fae7c188e6bb09cf16e470b 13 Apr 2022
CVE-2022-24788: Buffer Overrun in vyper N/A unrated 049dbdc647b2ce838fae7c188e6bb09cf16e470b 13 Apr 2022
CVE-2022-24787: Vyper - Incorrect Comparison of Bytestrings N/A unrated 2c73f8352635c0a433423a5b94740de1a118e508 04 Apr 2022
Vyper Package - Integer Manipulation Vulnerability N/A low No fix published 25 Mar 2020

Looking for another version, or everything Vulert holds for vyper?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About vyper 0.4.2rc1

Is vyper 0.4.2rc1 vulnerable?

Yes. 20 vulnerabilities in the Vulert database cover vyper 0.4.2rc1: 1 critical, 2 high, 5 medium and 6 low, plus 6 not yet rated. The upgrade Vulert recommends is 0.4.3, and each entry above names the fixed version to move to.

Which version of vyper should I use instead of 0.4.2rc1?

0.4.3 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 0.4.2rc1 the latest release of vyper?

No. 0.4.2rc1 was published 02 May 2025, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor vyper for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the vyper version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.