2vyper (0.3.0), async-web3 (>=0.1.0, <=0.3.1) +11 more potentially affected by CVE-2021-41121 via vyper (>=0.1.0b3, <=0.2.16)

vyper PYPI version =0.1.0b3, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =1.4.0, =0.2.1, =0.1.3, =2.0.24, =0.1.2b2, =0.1.0, =0.2.4 Source cves: CVE-2021-41121 Source advisory: OSV:GHSA-XV8X-PR4H-73JV...

2vyper (0.3.0), async-web3 (>=0.1.0, <=0.3.1) +11 more potentially affected by CVE-2021-41121 via vyper (>=0.1.0b3, <=0.2.16)

vyper PYPI version =0.1.0b3, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =1.4.0, =0.2.1, =0.1.3, =2.0.24, =0.1.2b2, =0.1.0, =0.2.4 Source cves: CVE-2021-41121 Source advisory: MEND:CVE-2021-41121...

CVE-2021-41121

CVE-2021-41121 (Vyper) affects the Vyper compiler/language used for EVM smart contracts. The issue occurs in affected versions when performing a function call inside a literal struct, caused by an incorrect pointer to the top of the stack, leading to memory corruption. The vulnerability has been ...