vyper vulnerabilities and fixes

Recent CVEs affecting vyper, with upgrade or downgrade steps. 4 tracked.

vyper has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-02-21. Highest priority: CVE-2025-27105 (score 54/100).

• CVE-2025-27105 CRITICAL 9.1 UPGRADE vyper is a Pythonic Smart Contract Language for the EVM
• CVE-2025-27104 HIGH 7.5 UPGRADE vyper is a Pythonic Smart Contract Language for the EVM
• CVE-2025-26622 HIGH 7.5 UPGRADE vyper is a Pythonic Smart Contract Language for the EVM
• CVE-2025-21607 HIGH 7.5 UPGRADE Vyper is a Pythonic Smart Contract Language for the EVM

FAQ

How do I fix vyper vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is vyper being exploited right now?

None of the tracked vyper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which vyper CVE should I patch first?

CVE-2025-27105 currently ranks highest (54/100): vyper is a Pythonic Smart Contract Language for the EVM.

RSS feed for vyper · ← Back to latest CVEs