LOWCVSS v3.1 3.7Vulnerability
CVE-2020-37288
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination (stack underflow). Affected contracts revert such calls unnecessarily, which in limited circumstances could enable denial of service against public contracts.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Epss score
- 0.00284
- Cvss severity
- LOW
- Cvss score
- 3.7
- Retrieved at
- 2026-10-22T22:17:31+00:00
- Last source
- FIRST EPSS
- Score
- 3.7
- Cvss version
- 3.1
- Cve id
- CVE-2020-37288
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- First seen by Signal
- 2026-10-21T22:34:38+00:00
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- Published at
- 2026-10-21T01:17:18.683
- Last modified
- 2026-10-22T17:39:56.760
- Epss percentile
- 0.19828
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph