PyPI/vyper CVE-2025-47774: low 2.9, EPSS 0.48%
Vyper's `slice()` may elide side-effects when output length is 0
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.2rc1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3vcg-j39x-cwfm
- nvd: CVE-2025-47774
- https://github.com/vyperlang/vyper/security/advisories/GHSA-3vcg-j39x-cwfm
- https://github.com/vyperlang/vyper/pull/4645
- https://github.com/vyperlang/vyper
- https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L315-L319
- https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/codegen/core.py#L189-L191
CVE-2025-47774 · published · modified · JSON