Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2021/10/06 5:48 p.m.37 views

missing clamps for decimal args in external functions

Impact The following code does not properly validate that its input is in bounds. python @external def foox: decimal - decimal: return x Patches 0.3.0 / 2447 Workarounds Don't use decimal args...

4.3CVSS2.7AI score0.00803EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2021/10/06 4:25 a.m.7 views

Denial Of Service (DoS)

vyper is vulnerable to denial of service DoS. The library does not properly validate the bounds of decimal arguments in external functions, resulting in logical errors...

4.3CVSS6.5AI score0.00803EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/05 12:0 a.m.10 views

PT-2021-23105 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions prior to 0.3.0 Description: The issue arises from external functions not properly validating the bounds of decimal arguments, leading to potential logic errors. Recommendations: For versions prior to 0.3.0, update to version...

5.3CVSS4.3AI score0.00803EPSS
SaveExploits1References9
Rows per page
Query Builder