vyper vulnerabilities — 87 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
6.9 medium Memory Corruption Vulnerability in Vyper Package vyper PyPI 06 Oct 2026 0.2.6
6.9 medium Call Stack Corruption in Vyper: Multi-Dimensional Array Handling Vulnerability vyper PyPI 06 Oct 2026 0.2.6
6.3 medium Vyper Vulnerability: Invalid Jump Destination Due to Return in Nested For Loops vyper PyPI 06 Oct 2026 0.2.3
2.9 low CVE-2025-47774: Vyper Package Slice Function Elides Side-Effects with Zero Length Output vyper PyPI 07 Jul 2026 No fix published
2.9 low CVE-2025-47285: Vyper Package - Side-Effect Elision in concat() Builtin for Zero-Length Arguments vyper PyPI 07 Jul 2026 No fix published
2.9 low CVE-2025-47774: Vyper Package Slice Function Elides Side Effects vyper PyPI 16 May 2025 No fix published
2.9 low CVE-2025-47285: Vyper Package - Side Effects Elision in concat() for Zero-Length Arguments vyper PyPI 16 May 2025 No fix published
2.3 low CVE-2025-27104: Vyper Double Evaluation Vulnerability in For List Iteration vyper PyPI 21 Feb 2025 0.4.1
2.3 low CVE-2025-27105: Vyper AugAssign Evaluation Order Vulnerability Leading to Out-of-Bounds Write vyper PyPI 21 Feb 2025 0.4.1
2.3 low CVE-2025-26622: Vyper sqrt Function Rounding Behavior Vulnerability vyper PyPI 21 Feb 2025 0.4.1
Unrated CVE-2025-27105: Vyper DynArray Access Vulnerability Leading to Potential Data Corruption vyper PyPI 21 Feb 2025 0.4.1
Unrated CVE-2025-27104: Vyper Package Vulnerability Leading to Unexpected Behavior in For Loops vyper PyPI 21 Feb 2025 0.4.1
Unrated CVE-2025-26622: Vyper Package Square Root Calculation Vulnerability vyper PyPI 21 Feb 2025 0.4.1
7.5 high CVE-2025-21607: Vyper Package Gas Mismanagement in Precompile Calls vyper PyPI 14 Jan 2025 0.4.1
2.3 low CVE-2025-21607: Vyper Compiler Vulnerability in Precompile Calls vyper PyPI 14 Jan 2025 No fix published
5.3 medium CVE-2024-32481: Vyper - Reverting Loop Vulnerability vyper PyPI 25 Apr 2024 0.4.0
5.3 medium CVE-2024-32645: vyper - Incorrect Topic Logging in raw_log vyper PyPI 25 Apr 2024 0.4.0
5.3 medium CVE-2024-32646: Vyper - Double Eval Vulnerability in Slice Builtin vyper PyPI 25 Apr 2024 0.4.0
5.3 medium CVE-2024-32647: Vyper - Double Evaluation of Raw Args in create_from_blueprint vyper PyPI 25 Apr 2024 0.4.0
5.3 medium CVE-2024-32648: Vyper - Default Functions Don't Respect Nonreentrancy Keys vyper PyPI 25 Apr 2024 0.3.0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.