OpenZeppelin

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

OpenZeppelin records in CISA KEV

No OpenZeppelin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contracts 20 records MEDIUM Contracts Upgradeable 12 records MEDIUM Openzeppelin 1 record LOW Openzeppelin-eth 1 record LOW Openzeppelin-solidity 1 record LOW Openzeppelin Contracts 1 record LOW Openzeppelin Contracts-upgradable 1 record LOW

Records

1 record in Openzeppelin · all components

TI-2021-21156 CVE-2021-46320 · GHSA-88g8-f5mf-f5rj

In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract…

LOW 35

In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they make an untrusted non-view external call.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01217 Published 2022-02-04 Fixed in 4.4.1 CWE-665

Open these records in search →

Critical	3
High	9
Medium	13
Low	1
No CVSS	0