What’s Vulnerable › Products

ethereum web3.py vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ethereum web3.py version is affected

Latest ethereum web3.py vulnerabilities

• CVE-2026-111171 — Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass (CVSS 5.4)
• CVE-2026-40072 — web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling (CVSS 7.2)