Skip to content
OpenAdvisories

Package · npm

@openzeppelin/contracts

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-wmpv-c2jp-j2xg

    ERC1155Supply vulnerability in OpenZeppelin Contracts

    When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the `ERC1155Supply` extension, total supply is not updated until after the callback, thus during the callback the reported total sup…

    @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm