OpenZeppelin

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

OpenZeppelin records in CISA KEV

No OpenZeppelin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contracts 20 records MEDIUM Contracts Upgradeable 12 records MEDIUM Openzeppelin 1 record LOW Openzeppelin-eth 1 record LOW Openzeppelin-solidity 1 record LOW Openzeppelin Contracts 1 record LOW Openzeppelin Contracts-upgradable 1 record LOW

Records

1 record in Openzeppelin Contracts · all components

TI-2023-20905 CVE-2023-40014 · GHSA-g4vp-m682-qqmp

OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender

LOW 31

OpenZeppelin Contracts is a library for secure smart contract development.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00743 Published 2023-08-10 Fixed in 4.9.3 CWE-116

Open these records in search →