Skip to content
OpenAdvisories

Package · PyPI

openzeppelin-cairo-contracts

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.4
    CVE-2023-23940

    OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass

    OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. `is_valid_eth_signature` is missing a call to `finalize_keccak` after calling `verify_eth_signature`. As a result, an…

    OpenZeppelin cairo-contracts openzeppelin-cairo-contracts PyPI
  • Medium 6.5
    CVE-2022-31153

    OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

    OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts …

    OpenZeppelin cairo-contracts openzeppelin-cairo-contracts PyPI