Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-41122 EUVD-2021-0460GHSA-c7pr-343r-5c46PYSEC-2021-366

Bounds check missing for decimal args in Vyper

Published Oct 5, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.

Affected products

VendorProductAffectedFixed
vyperlang vyper < 0.3.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI vyper < 0.3.0 0.3.0 GHSA-c7pr-343r-5c46

References