@openzeppelin/contracts

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-41264

  UUPSUpgradeable vulnerability in OpenZeppelin Contracts

  OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@ope…

  OpenZeppelin openzeppelin-contracts @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm
  Nov 12, 2021
• Critical 10.0
  CVE-2021-39167

  TimelockController vulnerability in OpenZeppelin Contracts

  OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a…

  OpenZeppelin openzeppelin-contracts @openzeppelin/contracts npm
  Aug 26, 2021