—

PYSEC-2021-366

Details

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / vyper

Introduced in: 0 Fixed in: 0.3.0

Fix pip install --upgrade 'vyper>=0.3.0'

References

https://github.com/vyperlang/vyper/security/advisories/GHSA-c7pr-343r-5c46 [ADVISORY]
https://github.com/vyperlang/vyper/pull/2447 [WEB]