https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T23:49:24.785530+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234262 EUVD-2026-234262 2026-10-20T23:49:24.791451+00:00 EUVD-2026-234262 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24788 fkie_cve-2022-24788 2026-10-20T23:49:24.791497+00:00

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-4mrx-6fxm-8jpg GHSA-4mrx-6fxm-8jpg — Buffer Overflow in vyper 2026-10-20T23:49:24.791542+00:00

Affected: PyPI: vyper

### Impact Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun.

### Patches 0.3.2 (as of https://github.com/vyperlang/vyper/commit/049dbdc647b2ce838fae7c188e6bb09cf16e470b)

### Workarounds Use .vy interfaces.

 https://cve.radiocsirt.org/vuln/gsd-2022-24788 gsd-2022-24788 2026-10-20T23:49:24.791579+00:00 gsd-2022-24788 https://cve.radiocsirt.org/vuln/pysec-2022-197 PYSEC-2022-197 2026-10-20T23:49:24.791596+00:00

Affected: PyPI: vyper

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.