https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 03:19:33 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-114663 <p>Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function&#39;s scope rather than at declaration. When a contract&#39;s parameter, local, or loop variable shares such a name, attacker-influenced input can replace the intended value, including out-of-range values for narrow types such as uint8, corrupting validation or accounting logic.</p> <p>Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function&#39;s scope rather than at declaration. When a contract&#39;s parameter, local, or loop variable shares such a name, attacker-influenced input can replace the intended value, including out-of-range values for narrow types such as uint8, corrupting validation or accounting logic.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114663 https://db.gcve.eu/vuln/ghsa-9r8w-599f-g6jq <p>Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function&#39;s scope rather than at declaration. When a contract&#39;s parameter, local, or loop variable shares such a name, attacker-influenced input can replace the intended value, including out-of-range values for narrow types such as uint8, corrupting validation or accounting logic.</p> <p>Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function&#39;s scope rather than at declaration. When a contract&#39;s parameter, local, or loop variable shares such a name, attacker-influenced input can replace the intended value, including out-of-range values for narrow types such as uint8, corrupting validation or accounting logic.</p> https://db.gcve.eu/vuln/ghsa-9r8w-599f-g6jq