Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2025/02/21 10:43 p.m.•30 views

Vyper's sqrt doesn't define rounding behavior

Vyper's sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. the fix is tracked in https://github.com/vyperlang/vyper/pull/4486 Vulnerability Detai...

7.5CVSS7.2AI score0.00327EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
•added 2025/02/21 10:15 p.m.•15 views

PYSEC-2025-29

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

7.5CVSS6.8AI score0.00327EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/02/21 10:15 p.m.•20 views

PYSEC-2025-29

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

7.5CVSS5.9AI score0.00327EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/21 9:36 p.m.•44 views

CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

2.3CVSS0.00327EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/21 9:36 p.m.•99 views

CVE-2025-26622

The Vyper smart contract language for the EVM is vulnerable to incorrect calculation within its sqrt() builtin. The root cause is the improper handling of oscillating final states when using the Babylonian method, which can lead to the function incorrectly returning rounded up results . Affected ...

7.5CVSS6.4AI score0.00327EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/21 9:36 p.m.•20 views

CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

2.3CVSS7.4AI score0.00327EPSS
SaveExploits0References2
Rows per page
Query Builder