CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2021-41122
Medium (4.3) in vyperlang vyper. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in vyper 0.3.0.
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-682
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vyperlang:vyper
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-c7pr-343r-5c46 | PyPI | vyper | <0.3.0 | 0.3.0 |
| PYSEC-2021-366 | PyPI | vyper | <0.3.0 | 0.3.0 |