Vyper numeric error vulnerability

A numerical error vulnerability exists in Vyper versions 0.3.4 through 0.5.0b1. It arises because the createfromblueprint function calculates the remaining blueprint size via a uint256 subtraction without first checking whether codeoffset is smaller than the blueprint’s code size. As a result, a...