Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2021-0266

Good to know:

icon

Date: August 19, 2025

An issue was found in versions 0.2.13 and 0.2.14 of the "vyper" package. Reentrancy protection storage slots get allocated to the same slots as storage variables, leading to the corruption of storage variables when using the @nonreentrant decorator. This issue was fixed in v0.2.15.

Language: Python

Severity Score

Related Resources (5)

https://github.com/vyperlang/vyper/pull/2379
https://github.com/vyperlang/vyper/pull/2391
https://github.com/vyperlang/vyper/security/advisories/GHSA-7f92-rr6w-cq64
https://github.com/vyperlang/vyper/commit/02476296d604b250f8e6895021c6649af6401430
https://www.mend.io/vulnerability-database/WS-2021-0266

Severity Score

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us