Skip to content
OpenAdvisories

Product · OpenZeppelin

cairo-contracts

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-45304

    OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts

    Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup. This vulnerability can lead to unauthorized ownership transfer, contrary to the original owner's intention of leaving the contract without an owner. It introd…

    OpenZeppelin cairo-contracts
  • Medium 6.4
    CVE-2023-23940

    OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass

    OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. `is_valid_eth_signature` is missing a call to `finalize_keccak` after calling `verify_eth_signature`. As a result, an…

    OpenZeppelin cairo-contracts openzeppelin-cairo-contracts PyPI
  • Medium 6.5
    CVE-2022-31153

    OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

    OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts …

    OpenZeppelin cairo-contracts openzeppelin-cairo-contracts PyPI