search

vyperlang / vyper

Pythonic Smart Contract Language for the EVM
https://vyperlang.org
Other
4.84k stars 788 forks source link

double eval of raw_args in create_from_blueprint #3975

Closed charles-cooper closed 3 months ago

charles-cooper commented 4 months ago

Version Information

What's your issue about?

tracking issue for https://github.com/vyperlang/vyper/security/advisories/GHSA-3whq-64q2-qfj6

charles-cooper commented 4 months ago

honestly, we should consider just getting rid of the raw_args= variant, since it is unused

cyberthirst commented 3 months ago

fixed in: https://github.com/vyperlang/vyper/pull/3976