Openzeppelin Contracts Upgradeable vulnerabilities

• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more OpenZeppelin Contracts base64 encoding may read from potentially dirty memory CVE-2024-27094 Fix available 6.5 MediumFebruary 29, 2024
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more Duplicated execution of subcalls in OpenZeppelin Contracts CVE-2023-49798 Fix available 5.9 MediumDecember 8, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees CVE-2023-34459 Fix available 5.3 MediumJune 16, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more Governor proposal creation may be blocked by frontrunning in OpenZeppelin CVE-2023-34234 Fix available 5.3 MediumJune 7, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contracts CVE-2023-30541 Fix available 5.3 MediumApril 17, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more GovernorCompatibilityBravo may trim proposal calldata CVE-2023-30542 Fix available 6.8 MediumApril 16, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more OpenZeppelin Contracts contains Incorrect Calculation CVE-2023-26488 Fix available 6.5 MediumMarch 3, 2023
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more ECDSA signature malleability in OpenZeppelin Contracts CVE-2022-35961 Fix available 7.9 HighAugust 14, 2022
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more +4 more Unbounded gas consumption in @openzeppelin/contracts CVE-2022-35915 Fix available 5.3 MediumAugust 1, 2022
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls CVE-2022-35916 Fix available 5.3 MediumAugust 1, 2022
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts CVE-2022-31198 Fix available 7.5 HighAugust 1, 2022
• openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more OpenZeppelin Contracts initializer reentrancy may lead to double initialization CVE-2022-39384 Fix available 5.6 MediumDecember 14, 2021