How many CVEs have patched __init__?

7 published CVEs changed __init__ in vyperlang/vyper, in 14 distinct patches totalling 126 changed lines, between 2021 and 2024.

What is the latest CVE that changed __init__?

CVE-2024-32648 (vyper default functions don't respect nonreentrancy keys), published 2024-04-25, changed lines 26 of vyper/ast/signatures/function_signature.py.

How does __init__ compare to the rest of vyperlang/vyper?

vyperlang/vyper has 30 CVEs with a located fix in total; 7 of them changed __init__.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

__init__ in vyperlang/vyper: Patched by 7 CVEs

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/ast/signatures/function_signature.py · line 26 · +1 −1

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/old_codegen/context.py · lines 28–68 · +4 −2 in 3 hunks

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/old_codegen/expr.py · line 205 · +1 −1

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/old_codegen/lll_node.py · lines 66–236 · +19 −4 in 3 hunks

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/semantics/namespace.py · line 25 · +1 −1

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/semantics/types/function.py · line 99 · +1 −0

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper default functions don't respect nonreentrancy keys

CVE-2024-32648 · vyper/semantics/types/indexable/sequence.py · lines 119–121 · +2 −0

Medium · CVSS 5.3

EPSS 0.4%2024-04-25

vyper's range(start, start + N) reverts for negative numbers

CVE-2024-32481 · vyper/exceptions.py · line 44 · +1 −1

Medium · CVSS 5.3

EPSS 0.8%2024-04-25

Vyper has incorrect storage layout for contracts containing large arrays

CVE-2023-46247 · vyper/semantics/types/subscriptable.py · lines 106–108 · +3 −0

High · CVSS 7.5

EPSS 0.7%2023-12-13

Vyper has incorrect re-entrancy lock when key is empty string

CVE-2023-42441 · vyper/exceptions.py · lines 57–59 · +3 −1

Medium · CVSS 5.3

EPSS 0.5%2023-09-18

vyper vulnerable to storage allocator overflow

CVE-2023-30837 · vyper/semantics/types/subscriptable.py · lines 106–108 · +3 −0

High · CVSS 8.7

EPSS 0.7%2023-05-08

Memory corruption in Vyper

CVE-2021-41121 · vyper/ast/signatures/function_signature.py · line 26 · +1 −1

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/old_codegen/context.py · lines 28–68 · +4 −2 in 3 hunks

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/old_codegen/expr.py · line 205 · +1 −1

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/old_codegen/lll_node.py · lines 66–236 · +19 −4 in 3 hunks

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/semantics/namespace.py · line 25 · +1 −1

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/semantics/types/function.py · line 99 · +1 −0

High · CVSS 7.7

EPSS 1.1%2021-10-06

Memory corruption in Vyper

CVE-2021-41121 · vyper/semantics/types/indexable/sequence.py · lines 119–121 · +2 −0

High · CVSS 7.7

EPSS 1.1%2021-10-06

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/ast/signatures/function_signature.py · line 26 · +1 −1

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/old_codegen/context.py · lines 28–68 · +4 −2 in 3 hunks

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/old_codegen/expr.py · line 205 · +1 −1

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/old_codegen/lll_node.py · lines 66–236 · +19 −4 in 3 hunks

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/semantics/namespace.py · line 25 · +1 −1

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/semantics/types/function.py · line 99 · +1 −0

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

missing clamps for decimal args in external functions

CVE-2021-41122 · vyper/semantics/types/indexable/sequence.py · lines 119–121 · +2 −0

Medium · CVSS 5.3

EPSS 0.8%2021-10-05

init

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track vyperlang/vyper CVEs