Skip to content
OpenAdvisories

Package · npm

@openzeppelin/contracts-upgradeable

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-7j52-6fjp-58gr

    Inconsistent storage layout for ERC2771ContextUpgradeable

    ### Impact The storage layout of the ERC2771ContextUpgradeable is not constant between versions. - versions `4.0.0`, `4.1.0` and `4.2.0`, the contract has a length of 51 slots. - since `4.3.0`, the contract has a length of 50 slots - future versions will cont…

    @openzeppelin/contracts-upgradeable npm
  • Low —
    GHSA-wmpv-c2jp-j2xg

    ERC1155Supply vulnerability in OpenZeppelin Contracts

    When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the `ERC1155Supply` extension, total supply is not updated until after the callback, thus during the callback the reported total sup…

    @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm