CVE-2023-32059

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments are compiled incorrectly. Depending on the number of arguments provided in the call, the defaults are added not right-to-left, but left-to-right. If the types are incompatible, typechecking is bypassed. The ability to pass kwargs to internal functions is an undocumented feature that is not well known about. The issue is patched in version 0.3.8.

• CWE-683

• https://github.com/vyperlang/vyper/commit/c3e68c302aa6e1429946473769dd1232145822acPatch
• https://github.com/vyperlang/vyper/security/advisories/GHSA-ph9x-4vc9-m39gExploit, Vendor Advisory
• https://github.com/vyperlang/vyper/commit/c3e68c302aa6e1429946473769dd1232145822acPatch
• https://github.com/vyperlang/vyper/security/advisories/GHSA-ph9x-4vc9-m39gExploit, Vendor Advisory

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32053Windows Installer Elevation of Privilege Vulnerability7.8
• CVE-2023-32054Volume Shadow Copy Elevation of Privilege Vulnerability7.3
• CVE-2023-32055Active Template Library Elevation of Privilege Vulnerability6.7
• CVE-2023-32056Windows Server Update Service (WSUS) Elevation of Privilege …9.8
• CVE-2023-32057Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8
• CVE-2023-32058Vyper is a Pythonic smart contract language for the Ethereum…7.5
• CVE-2023-3206A vulnerability classified as problematic was found in Cheng…7.5
• CVE-2023-32060DHIS2 Core contains the service layer and Web API for DHIS2,…6.5
• CVE-2023-32061Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2023-32062OroPlatform is a package that assists system and user calend…4.3
• CVE-2023-32063OroCalendarBundle enables a Calendar feature and related fun…5
• CVE-2023-32064OroCommerce package with customer portal and non authenticat…4.3