CVE-2026-114117

The Vyper compiler (versions 0.3.8 through 0.5.0b1 ) contains an optimizer miscompilation affecting ternary expression branches. When using the -O gas (default) or -O codesize optimization flags, the expressions (msg.value | K) or (len(msg.data) | K)—where K is any nonzero integer literal—are inc...

EUVD-2026-106920

Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which msg.value | K or lenmsg.data | K, where K is any nonzero integer literal, is compiled to the constant 1 when used as a ternary expression branch under -O gas the default or -O codesize. Affected contracts use the wrong valu...