{"action":"Upgrade vyper to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0"}],"component":"vyper","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-4v7v-gqf9-ww2g","id":"tcs_01M5KEZ2GPA9BX9XYFYCYHS614","modified_at":"2026-10-06T15:30:03.646574259Z","published_at":"2026-10-06T15:22:23Z","references":["https://osv.dev/vulnerability/GHSA-4v7v-gqf9-ww2g","https://github.com/vyperlang/vyper/security/advisories/GHSA-4v7v-gqf9-ww2g","https://github.com/vyperlang/vyper/issues/2183","https://github.com/vyperlang/vyper/pull/2184","https://github.com/vyperlang/vyper/commit/0be02b7331e8febe79d5a4218829c72e30417a29","https://github.com/vyperlang/vyper","https://github.com/vyperlang/vyper/releases/tag/v0.2.6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4v7v-gqf9-ww2g","url":"https://osv.dev/vulnerability/GHSA-4v7v-gqf9-ww2g"}],"summary":"Vyper: Call stack corruption when passing complex type containing non-base type members as argument"}