PyPI/vyper CVE-2023-32675: unknown, EPSS 0.55%
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if
Action: Upgrade vyper to 0.3.8 or later.
pip install vyper==0.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.8 | - |
Fixed versions
| 0.3.8 |
Sources
- osv: PYSEC-2023-80
- https://github.com/vyperlang/vyper/security/advisories/GHSA-vxmm-cwh2-q762
- https://github.com/vyperlang/vyper/commit/02339dfda0f3caabad142060d511d10bfe93c520.
CVE-2023-32675 · published · modified · JSON