tocsin

PyPI/vyper CVE-2024-24560: medium 5.3, EPSS 0.53%

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made, we write the input buffer starting at byte 28, and allocate the return buffer t

Action: Upgrade vyper to 0.4.0b1 or later.

pip install vyper==0.4.0b1

Affected

introducedfixedlast affected
00.4.0b1-

Fixed versions

0.4.0b1

Sources

CVE-2024-24560 · published · modified · JSON