{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.2"}],"component":"vyper","cve_ids":["CVE-2023-40015"],"ecosystem":"PyPI","epss":0.00492,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g2xh-c426-v8mf","id":"tcs_01M5KFGHSEK545FCZ147GTZFA3","modified_at":"2025-06-18T18:23:19.820952Z","published_at":"2023-09-04T16:39:00Z","references":["https://osv.dev/vulnerability/GHSA-g2xh-c426-v8mf","https://github.com/vyperlang/vyper/security/advisories/GHSA-g2xh-c426-v8mf","https://nvd.nist.gov/vuln/detail/CVE-2023-40015","https://github.com/vyperlang/vyper/issues/3604","https://github.com/vyperlang/vyper/issues/4019","https://github.com/vyperlang/vyper/pull/4157","https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-167.yaml","https://github.com/vyperlang/vyper"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-g2xh-c426-v8mf","url":"https://osv.dev/vulnerability/GHSA-g2xh-c426-v8mf"}],"summary":"Vyper: reversed order of side effects for some operations"}