{"action":"Upgrade vyper to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"vyper","cve_ids":["CVE-2024-24559"],"ecosystem":"PyPI","epss":0.00255,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-6845-xw22-ffxv","id":"tcs_01M5KF2V75P0SB83F24HYEG8E3","modified_at":"2026-09-10T03:50:09.814041Z","published_at":"2024-02-05T19:21:52Z","references":["https://osv.dev/vulnerability/GHSA-6845-xw22-ffxv","https://github.com/vyperlang/vyper/security/advisories/GHSA-6845-xw22-ffxv","https://nvd.nist.gov/vuln/detail/CVE-2024-24559","https://github.com/vyperlang/vyper/pull/4063","https://github.com/vyperlang/vyper/commit/d9f9fdadd81a148cbc68f02dbbbcdc0c92fad652","https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2024-147.yaml","https://github.com/vyperlang/vyper","https://github.com/vyperlang/vyper/blob/c150fc49ee9375a930d177044559b83cb95f7963/vyper/ir/compile_ir.py#L585-L586"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-6845-xw22-ffxv","url":"https://osv.dev/vulnerability/GHSA-6845-xw22-ffxv"}],"summary":"Vyper sha3 codegen bug"}