{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.0a33"}],"component":"py-evm","cve_ids":["CVE-2018-18920"],"ecosystem":"PyPI","epss":0.02926,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vqgp-4jgj-5j64","id":"tcs_01M5KG0NPN7SM1JE0093J3FCWM","modified_at":"2026-06-05T18:00:16.684062959Z","published_at":"2018-11-21T22:23:04Z","references":["https://osv.dev/vulnerability/GHSA-vqgp-4jgj-5j64","https://nvd.nist.gov/vuln/detail/CVE-2018-18920","https://github.com/ethereum/py-evm/issues/1448","https://github.com/advisories/GHSA-vqgp-4jgj-5j64","https://github.com/ethereum/py-evm","https://github.com/pypa/advisory-database/tree/main/vulns/evm-py/PYSEC-2018-155.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/py-evm/PYSEC-2018-96.yaml","https://twitter.com/AlexanderFisher/status/1060923428641878019","https://twitter.com/NettaLab/status/1060889400102383617","https://www.reddit.com/r/ethereum/comments/9vkk2g/netta_labs_claim_to_have_found_a_vulnerability_in/e9d3wyx"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vqgp-4jgj-5j64","url":"https://osv.dev/vulnerability/GHSA-vqgp-4jgj-5j64"}],"summary":"Py-EVM is vulnerable to arbitrary bytecode injection"}