@openzeppelin/contracts vulnerabilities (npm)
21 vulnerabilities.
-
@openzeppelin/contractsnpm OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers 6.9 Medium -
@openzeppelin/contractsnpm OpenZeppelin Contracts base64 encoding may read from potentially dirty memory 6.5 Medium -
@openzeppelin/contractsnpm Duplicated execution of subcalls in OpenZeppelin Contracts 5.9 Medium -
@openzeppelin/contractsnpm OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender 5.3 Medium -
@openzeppelin/contractsnpm OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees 5.3 Medium -
@openzeppelin/contractsnpm Governor proposal creation may be blocked by frontrunning in OpenZeppelin 5.3 Medium -
@openzeppelin/contractsnpm TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contracts 5.3 Medium -
@openzeppelin/contractsnpm GovernorCompatibilityBravo may trim proposal calldata 6.8 Medium -
@openzeppelin/contractsnpm OpenZeppelin Contracts contains Incorrect Calculation 6.5 Medium -
@openzeppelin/contractsnpm ECDSA signature malleability in OpenZeppelin Contracts 7.9 High -
@openzeppelin/contractsnpm Unbounded gas consumption in @openzeppelin/contracts 5.3 Medium -
@openzeppelin/contractsnpm Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls 5.3 Medium -
@openzeppelin/contractsnpm GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts 7.5 High -
@openzeppelin/contractsnpm OpenZeppelin Contracts's ERC165Checker may revert instead of returning false 7.5 High -
@openzeppelin/contractsnpm OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers 7.5 High -
@openzeppelin/contractsnpm GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior No score -
@openzeppelin/contractsnpm OpenZeppelin Contracts initializer reentrancy may lead to double initialization 5.6 Medium -
@openzeppelin/contractsnpm Improper Initialization in OpenZeppelin 7.5 High -
@openzeppelin/contractsnpm ERC1155Supply vulnerability in OpenZeppelin Contracts No score -
@openzeppelin/contractsnpm UUPSUpgradeable vulnerability in OpenZeppelin Contracts 9.8 Critical -
@openzeppelin/contractsnpm TimelockController vulnerability in OpenZeppelin Contracts 10.0 Critical