PyPI/vyper CVE-2022-29255: high 7.5, EPSS 1.35%

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return value, the contract address (including side

Action: Upgrade vyper to 0.3.4 or later.

pip install vyper==0.3.4

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43053
• https://github.com/vyperlang/vyper/security/advisories/GHSA-4v9q-cgpw-cf38
• https://github.com/vyperlang/vyper/commit/6b4d8ff185de071252feaa1c319712b2d6577f8d

CVE-2022-29255 · published 2022-06-09T09:15:00Z · modified 2023-11-08T04:09:12.537261Z · JSON