CVE-2023-42441

Name of the Vulnerable Software and Affected Versions Vyper versions 0.2.9 through 0.3.9

Description The issue concerns locks of the type @nonreentrant("") or @nonreentrant('') that do not produce reentrancy checks at runtime. This can be mitigated by ensuring the lock name is a non-empty string.

Recommendations For versions 0.2.9 through 0.3.9, ensure the lock name is a non-empty string as a workaround until the issue is resolved by updating to version 0.3.10 or later. For version 0.3.10 and later, no additional action is required as the issue is fixed in this version.