Patchfirst
Chainvyperlang · vyperPyPI:vyper

vyperlang vyper: successive fixes (2022)

3 CVEs over 2 generations, 13 Apr 2022 to 6 Jun 2022.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2022-2478813 Apr 2022 First in the chain
  2. CVE-2022-2484513 Apr 2022 No direct link to an earlier CVE
  3. CVE-2022-292556 Jun 2022 related to CVE-2022-24788related to CVE-2022-24845
Apr 2022MayJun CVE-2022-24788 → CVE-2022-29255: related (high confidence)CVE-2022-24845 → CVE-2022-29255: related (medium confidence) CVE-2022-24788 13 Apr 2022 CVE-2022-24845 13 Apr 2022 CVE-2022-29255 6 Jun 2022 Apr 2022MayJun CVE-2022-24788 → CVE-2022-29255: related (high confidence)CVE-2022-24845 → CVE-2022-29255: related (medium confidence) CVE-2022-24788 13 Apr 2022 CVE-2022-24845 13 Apr 2022 CVE-2022-29255 6 Jun 2022
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2022-24788 13 Apr 2022 Buffer overflow in Vyper · fixed in 0.3.2 First in chain 17.4
CVE-2022-24845 13 Apr 2022 Integer bounds error in Vyper · fixed in 0.3.2 First in chain 20.7
CVE-2022-29255 6 Jun 2022 Multiple evaluation of contract address in call in vyper · fixed in 0.3.4 CVE-2022-24788 · related · High 20.0
↑ ↓ chooseEnter openEsc close