{"action":"Upgrade vyper to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0"}],"component":"vyper","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-2r3x-4mrv-mcxf","id":"tcs_01M5KET5GS9T46ZJ7T76VKQRBW","modified_at":"2026-10-06T15:30:03.650675920Z","published_at":"2026-10-06T15:22:29Z","references":["https://osv.dev/vulnerability/GHSA-2r3x-4mrv-mcxf","https://github.com/vyperlang/vyper/security/advisories/GHSA-2r3x-4mrv-mcxf","https://github.com/vyperlang/vyper/pull/2186","https://github.com/vyperlang/vyper/commit/74ba67d4bec5f8be4f05759e37d2bfb1463e0441","https://github.com/vyperlang/vyper","https://github.com/vyperlang/vyper/releases/tag/v0.2.6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2r3x-4mrv-mcxf","url":"https://osv.dev/vulnerability/GHSA-2r3x-4mrv-mcxf"}],"summary":"Vyper: Memory corruption using function calls within tuples / nested calls"}