-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability occurs because @nonreentrant("") bypassed reentrancy checks. The commit diff shows the fix added validation in FunctionType.from_FunctionDef (via validate_identifier(nonreentrant_key)). Prior to this, the function accepted any string (including empty) as a valid key, failing to enforce proper locking. This function is directly responsible for processing decorators and lacked key validation, making it the root cause.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| vyper | pip | >= 0.2.9, < 0.3.10 | 0.3.10 |
Ongoing coverage of React2Shell