CVE-2025-47285
2 advisories.
PyPI/vyper CVE-2025-47285: low 2.9, EPSS 0.46%
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.2rc1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qhr6-mgqr-mchm
- nvd: CVE-2025-47285
- https://github.com/vyperlang/vyper/security/advisories/GHSA-qhr6-mgqr-mchm
- https://github.com/vyperlang/vyper/pull/4644
- https://github.com/vyperlang/vyper
- https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L560-L562
CVE-2025-47285 · published · modified · JSON
PyPI/vyper CVE-2025-47285: low 2.9, EPSS 0.46%
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.2rc1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2029
- nvd: CVE-2025-47285
- https://github.com/vyperlang/vyper/security/advisories/GHSA-qhr6-mgqr-mchm
- https://github.com/vyperlang/vyper/pull/4644
- https://github.com/vyperlang/vyper
- https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L560-L562
- https://pypi.org/project/vyper
- https://github.com/advisories/GHSA-qhr6-mgqr-mchm
CVE-2025-47285 · published · modified · JSON