GHSA-CX2Q-HFXR-RJ97 Vyper's `_abi_decode` input not validated in complex expressions
Impact abidecode does not validate input when it is nested in an expression. the following example gets correctly validated bounds checked: vyper x: int128 = abidecodeslicemsg.data, 4, 32, int128 however, the following example is not bounds checked vyper @external def abidecodex: uint256 - uint25...