https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:10:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-189084 EUVD-2026-189084 https://cve.radiocsirt.org/vuln/euvd-2026-189084 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41052 <p>Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> <p>Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41052 https://cve.radiocsirt.org/vuln/ghsa-4hg4-9mf5-wxxq <p><strong>Affected:</strong> PyPI: vyper</p> <p>### Impact The order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. • For `uint256_addmod(a,b,c)` and `uint256_mulmod(a,b,c)`, the order is `c,a,b`. • For `ecadd(a,b)` and `ecmul(a,b)`, the order is `b,a`.</p> <p>Note that this behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on.</p> <p>### Patches https://github.com/vyperlang/vyper/pull/3583</p> <p>### Workarounds When using builtins from the list above, make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> <p><strong>Affected:</strong> PyPI: vyper</p> <p>### Impact The order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. • For `uint256_addmod(a,b,c)` and `uint256_mulmod(a,b,c)`, the order is `c,a,b`. • For `ecadd(a,b)` and `ecmul(a,b)`, the order is `b,a`.</p> <p>Note that this behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on.</p> <p>### Patches https://github.com/vyperlang/vyper/pull/3583</p> <p>### Workarounds When using builtins from the list above, make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> https://cve.radiocsirt.org/vuln/ghsa-4hg4-9mf5-wxxq https://cve.radiocsirt.org/vuln/gsd-2023-41052 gsd-2023-41052 https://cve.radiocsirt.org/vuln/gsd-2023-41052 https://cve.radiocsirt.org/vuln/pysec-2023-168 <p><strong>Affected:</strong> PyPI: vyper</p> <p>Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> <p><strong>Affected:</strong> PyPI: vyper</p> <p>Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.</p> https://cve.radiocsirt.org/vuln/pysec-2023-168