web3.py vulnerabilities

1 known vulnerability in web3.py from Ethereum. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  web3.py: Server-Side Request Forgery

  CVE-2026-40072Apr 9, 2026Ethereum

  web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_pay