Skip to content
OpenAdvisories

Package · npm

@openzeppelin/contracts-upgradeable

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-41264

    UUPSUpgradeable vulnerability in OpenZeppelin Contracts

    OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@ope…

    OpenZeppelin openzeppelin-contracts @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm
  • Critical —
    GHSA-q4h9-46xg-m3x9

    UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable

    ### Impact Upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. We will update this advisory with more information soon. ### Patches A fix is included in version 4.3.2 of `@openzeppelin…

    @openzeppelin/contracts-upgradeable npm
  • Critical 10.0
    CVE-2021-39168

    TimelockController vulnerability in OpenZeppelin Contracts

    OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a…

    OpenZeppelin openzeppelin-contracts-upgradeable @openzeppelin/contracts-upgradeable npm