{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.2rc1"}],"component":"vyper","cve_ids":["CVE-2025-47774"],"ecosystem":"PyPI","epss":0.00479,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3vcg-j39x-cwfm","id":"tcs_01M5KEWH7JS57G1YS7W9VHKQ37","modified_at":"2026-07-07T17:57:17.629946444Z","published_at":"2025-05-16T14:13:29Z","references":["https://osv.dev/vulnerability/GHSA-3vcg-j39x-cwfm","https://github.com/vyperlang/vyper/security/advisories/GHSA-3vcg-j39x-cwfm","https://nvd.nist.gov/vuln/detail/CVE-2025-47774","https://github.com/vyperlang/vyper/pull/4645","https://github.com/vyperlang/vyper","https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L315-L319","https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/codegen/core.py#L189-L191"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-3vcg-j39x-cwfm","url":"https://osv.dev/vulnerability/GHSA-3vcg-j39x-cwfm"},{"source":"nvd","source_id":"CVE-2025-47774","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47774"}],"summary":"Vyper's `slice()` may elide side-effects when output length is 0"}