Product by Vyperlang
Vyper
53 known vulnerabilities in Vyper (Vyperlang), 0 of them actively exploited (CISA KEV).
Key figures
53
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-24563 | Vyper array negative index vulnerability | 9.8 | |
| Critical | CVE-2022-24845 | Integer bounds error in Vyper | 8.8 | |
| High | CVE-2022-29255 | Multiple evaluation of contract address in call in vyper | 8.2 | |
| Critical | CVE-2024-24561 | Vyper bounds check on built-in `slice()` function can be overflowed | 9.8 | |
| High | CVE-2021-48018 | Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator | 7.4 | |
| Critical | CVE-2023-31146 | Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment | 7.5 | |
| High | CVE-2021-48020 | Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays | 6.5 | |
| High | CVE-2020-37286 | Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls | 6.5 | |
| Critical | CVE-2023-39363 | Vyper incorrectly allocated named re-entrancy locks | 5.9 | |
| High | CVE-2026-114117 | Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches | 5.9 | |
| High | CVE-2026-114663 | Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments | 8.4 | |
| High | CVE-2020-37287 | Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments | 5.9 | |
| Critical | CVE-2025-27105 | AugAssign evaluation order causing OOB write within the object in Vyper | 9.1 | |
| High | CVE-2021-41121 | Memory corruption in Vyper | 7.5 | |
| High | CVE-2022-24787 | Incorrect Comparison in Vyper | 7.5 | |
| High | CVE-2023-42443 | Vyper vulnerable to memory corruption in certain builtins utilizing `msize` | 8.1 | |
| High | CVE-2023-32058 | Vyper vulnerable to integer overflow in loop | 7.5 | |
| High | CVE-2023-30629 | Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value | 7.5 | |
| Medium | CVE-2020-37288 | Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops | 3.7 | |
| Critical | CVE-2022-24788 | Buffer overflow in Vyper | 7.1 | |
| High | CVE-2025-21607 | Success of Certain Precompile Calls not Checked in Vyper | 7.5 | |
| Critical | CVE-2024-22419 | concat built-in can corrupt memory in vyper | 7.3 | |
| Medium | CVE-2026-114115 | Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection | 3.7 | |
| Medium | CVE-2020-37289 | Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values | 3.7 | |
| High | CVE-2023-46247 | Vyper has incorrect storage layout for contracts containing large arrays | 7.5 |