Product by Vyperlang

    Vyper

    53 known vulnerabilities in Vyper (Vyperlang), 0 of them actively exploited (CISA KEV).

    Key figures

    53

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Vyper (Vyperlang)
    CriticalCVE-2024-24563

    Vyper array negative index vulnerability

    9.8
    CriticalCVE-2022-24845

    Integer bounds error in Vyper

    8.8
    HighCVE-2022-29255

    Multiple evaluation of contract address in call in vyper

    8.2
    CriticalCVE-2024-24561

    Vyper bounds check on built-in `slice()` function can be overflowed

    9.8
    HighCVE-2021-48018

    Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator

    7.4
    CriticalCVE-2023-31146

    Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment

    7.5
    HighCVE-2021-48020

    Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays

    6.5
    HighCVE-2020-37286

    Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls

    6.5
    CriticalCVE-2023-39363

    Vyper incorrectly allocated named re-entrancy locks

    5.9
    HighCVE-2026-114117

    Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches

    5.9
    HighCVE-2026-114663

    Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments

    8.4
    HighCVE-2020-37287

    Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments

    5.9
    CriticalCVE-2025-27105

    AugAssign evaluation order causing OOB write within the object in Vyper

    9.1
    HighCVE-2021-41121

    Memory corruption in Vyper

    7.5
    HighCVE-2022-24787

    Incorrect Comparison in Vyper

    7.5
    HighCVE-2023-42443

    Vyper vulnerable to memory corruption in certain builtins utilizing `msize`

    8.1
    HighCVE-2023-32058

    Vyper vulnerable to integer overflow in loop

    7.5
    HighCVE-2023-30629

    Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value

    7.5
    MediumCVE-2020-37288

    Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops

    3.7
    CriticalCVE-2022-24788

    Buffer overflow in Vyper

    7.1
    HighCVE-2025-21607

    Success of Certain Precompile Calls not Checked in Vyper

    7.5
    CriticalCVE-2024-22419

    concat built-in can corrupt memory in vyper

    7.3
    MediumCVE-2026-114115

    Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection

    3.7
    MediumCVE-2020-37289

    Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values

    3.7
    HighCVE-2023-46247

    Vyper has incorrect storage layout for contracts containing large arrays

    7.5

    All vulnerabilities in search

    All products by Vyperlang