High severity7.5NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026
CVE-2023-30837
CVE-2023-30837
Description
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
vyperPyPI | < 0.3.8 | 0.3.8 |
Affected products
2Patches
Vulnerability mechanics
References
5- github.com/vyperlang/vyper/commit/0bb7203b584e771b23536ba065a6efda457161bbnvdPatchWEB
- github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6nvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-mgv8-gggw-mrg6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-30837ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-76.yamlghsaWEB
News mentions
0No linked articles in our index yet.