{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.2rc1"}],"component":"vyper","cve_ids":["CVE-2025-47774"],"ecosystem":"PyPI","epss":0.00479,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3vcg-j39x-cwfm","id":"tcs_01M5KGX2M0DR1S7QKT2NVE5ZD9","modified_at":"2026-07-07T17:47:20.257466071Z","published_at":"2026-07-07T16:02:52.607813Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2028","https://github.com/vyperlang/vyper/security/advisories/GHSA-3vcg-j39x-cwfm","https://nvd.nist.gov/vuln/detail/CVE-2025-47774","https://github.com/vyperlang/vyper/pull/4645","https://github.com/vyperlang/vyper","https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L315-L319","https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/codegen/core.py#L189-L191","https://pypi.org/project/vyper","https://github.com/advisories/GHSA-3vcg-j39x-cwfm"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-2028","url":"https://osv.dev/vulnerability/PYSEC-2026-2028"},{"source":"nvd","source_id":"CVE-2025-47774","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47774"}],"summary":"Vyper's `slice()` may elide side-effects when output length is 0"}