| Package | Affected versions | Patched versions |
|---|---|---|
| vyper | < 0.3.2 | 0.3.2 |
| vyper | < 0.3.2 | 0.3.2 |
Importing a function from a JSON interface which returns bytes generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun.
0.3.2 (as of https://github.com/vyperlang/vyper/commit/049dbdc647b2ce838fae7c188e6bb09cf16e470b)
Use .vy interfaces.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free