https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 23:49:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-234262 EUVD-2026-234262 https://cve.radiocsirt.org/vuln/euvd-2026-234262 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24788 <p>Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24788 https://cve.radiocsirt.org/vuln/ghsa-4mrx-6fxm-8jpg <p><strong>Affected:</strong> PyPI: vyper</p> <p>### Impact Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun.</p> <p>### Patches 0.3.2 (as of https://github.com/vyperlang/vyper/commit/049dbdc647b2ce838fae7c188e6bb09cf16e470b)</p> <p>### Workarounds Use .vy interfaces.</p> <p><strong>Affected:</strong> PyPI: vyper</p> <p>### Impact Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun.</p> <p>### Patches 0.3.2 (as of https://github.com/vyperlang/vyper/commit/049dbdc647b2ce838fae7c188e6bb09cf16e470b)</p> <p>### Workarounds Use .vy interfaces.</p> https://cve.radiocsirt.org/vuln/ghsa-4mrx-6fxm-8jpg https://cve.radiocsirt.org/vuln/gsd-2022-24788 gsd-2022-24788 https://cve.radiocsirt.org/vuln/gsd-2022-24788 https://cve.radiocsirt.org/vuln/pysec-2022-197 <p><strong>Affected:</strong> PyPI: vyper</p> <p>Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> PyPI: vyper</p> <p>Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/pysec-2022-197