HIGH 7.5
PYSEC-2023-191
상세
Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Uses of `_abi_decode()` can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a fix is expected in release `0.3.10`. Users are advised to reference pull request #3626.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.