GHSA-3hg2-r75x-g69m
First published: Mon Sep 18 2023(Updated: )
### Impact Locks of the type `@nonreentrant("")` or `@nonreentrant('')` do not produce reentrancy checks at runtime. ```Vyper @nonreentrant("") # unprotected @external def bar(): pass @nonreentrant("lock") # protected @external def foo(): pass ``` ### Patches Patched in #3605 ### Workarounds The lock name should be a non-empty string. ### References _Are there any links users can visit to find out more?_
| Affected Software | Affected Version | How to fix |
|---|---|---|
| pip/vyper | >=0.2.9<0.3.10 | 0.3.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the impact of GHSA-3hg2-r75x-g69m vulnerability?
Locks of the type '@nonreentrant()' do not produce reentrancy checks at runtime.
How can I patch GHSA-3hg2-r75x-g69m vulnerability?
The vulnerability has been patched in version 0.3.10 of the 'vyper' package.
Is there a workaround for GHSA-3hg2-r75x-g69m vulnerability?
No specific workaround information is available for this vulnerability.
What is the severity of GHSA-3hg2-r75x-g69m vulnerability?
The severity of this vulnerability is medium with a score of 5.3.
What is the Common Weakness Enumeration (CWE) ID for GHSA-3hg2-r75x-g69m vulnerability?
The CWE ID for this vulnerability is 667 and 833.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness