Vendor

OpenZeppelin

25 known vulnerabilities.

Products

openzeppelin-contracts 18 cairo-contracts 3 contracts-wizard 2 openzeppelin-confidential-contracts 1 wizard 1 wizard-cairo 1 wizard-stellar 1 wizard-stylus 1 openzeppelin-contracts-upgradeable 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2021-41264

UUPSUpgradeable vulnerability in OpenZeppelin Contracts

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@ope…

OpenZeppelin openzeppelin-contracts @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm

Nov 12, 2021
Critical 10.0

CVE-2021-39167

TimelockController vulnerability in OpenZeppelin Contracts

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a…

OpenZeppelin openzeppelin-contracts @openzeppelin/contracts npm

Aug 26, 2021
Critical 10.0

CVE-2021-39168

TimelockController vulnerability in OpenZeppelin Contracts

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a…

OpenZeppelin openzeppelin-contracts-upgradeable @openzeppelin/contracts-upgradeable npm

Aug 26, 2021