https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:38:58 +0000 https://cve.radiocsirt.org/vuln/cve-2024-24559 <p><strong>Affected:</strong> vyperlang vyper</p> <p>Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely, the `height` variable is miscalculated. The vulnerability can&#39;t be triggered without writing the `IR` by hand (that is, it cannot be triggered from regular vyper code). `sha3_64` is used for retrieval in mappings. No flow that would cache the `key` was found so the issue shouldn&#39;t be possible to trigger when compiling the compiler-generated `IR`. This issue isn&#39;t triggered during normal compilation of vyper code so the impact is low. At the time of publication there is no patch available.</p> <p><strong>Affected:</strong> vyperlang vyper</p> <p>Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely, the `height` variable is miscalculated. The vulnerability can&#39;t be triggered without writing the `IR` by hand (that is, it cannot be triggered from regular vyper code). `sha3_64` is used for retrieval in mappings. No flow that would cache the `key` was found so the issue shouldn&#39;t be possible to trigger when compiling the compiler-generated `IR`. This issue isn&#39;t triggered during normal compilation of vyper code so the impact is low. At the time of publication there is no patch available.</p> https://cve.radiocsirt.org/vuln/cve-2024-24559