Skip to content
OpenAdvisories

Vendor

ethereum

19 known vulnerabilities.

Products

go-ethereum 16 web3.py 2 RLPx 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.7
    CVE-2026-40072 Public exploit

    web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

    web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_pa…

    ethereum web3.py