PyPI/vyper CVE-2023-32059: unknown, EPSS 0.73%

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments are compiled incorrectly. Depending on the number of argumen

Action: Upgrade vyper to 0.3.8 or later.

pip install vyper==0.3.8

Affected

Fixed versions

Sources

• osv: PYSEC-2023-79
• https://github.com/vyperlang/vyper/commit/c3e68c302aa6e1429946473769dd1232145822ac
• https://github.com/vyperlang/vyper/security/advisories/GHSA-ph9x-4vc9-m39g

CVE-2023-32059 · published 2023-05-11T22:15:00Z · modified 2023-11-08T04:12:32.885897Z · JSON