CVE-2023-32675
2 advisories.
PyPI/vyper CVE-2023-32675: low 3.7
Vyper's nonpayable default functions are sometimes payable
Action: Upgrade vyper to 0.3.8 or later.
pip install vyper==0.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.8 | - |
Fixed versions
| 0.3.8 |
Sources
- osv: GHSA-vxmm-cwh2-q762
- https://github.com/vyperlang/vyper/security/advisories/GHSA-vxmm-cwh2-q762
- https://nvd.nist.gov/vuln/detail/CVE-2023-32675
- https://github.com/vyperlang/vyper/commit/02339dfda0f3caabad142060d511d10bfe93c520
- https://github.com/vyperlang/vyper/commit/02339dfda0f3caabad142060d511d10bfe93c520.
- https://github.com/vyperlang/vyper/commit/903727006c1e5ebef99fa9fd5d51d62bd33d72a9
- https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-80.yaml
- https://github.com/vyperlang/vyper
CVE-2023-32675 · published · modified · JSON
PyPI/vyper CVE-2023-32675: unknown
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if
Action: Upgrade vyper to 0.3.8 or later.
pip install vyper==0.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.8 | - |
Fixed versions
| 0.3.8 |
Sources
- osv: PYSEC-2023-80
- https://github.com/vyperlang/vyper/security/advisories/GHSA-vxmm-cwh2-q762
- https://github.com/vyperlang/vyper/commit/02339dfda0f3caabad142060d511d10bfe93c520.
CVE-2023-32675 · published · modified · JSON