Skip to content
Noroxi

OpenZeppelin records

22 published records for vendor openzeppelin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
95.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2021-39167
    39Monitor

    TimelockController vulnerability in OpenZeppelin Contracts

    CriticalCVSS 9.8No exploitEPSS 2%

    openzeppelin · contractsAug 26, 2021

  • CVE-2021-39168
    39Monitor

    TimelockController vulnerability in OpenZeppelin Contracts

    CriticalCVSS 9.8No exploitEPSS 2%

    openzeppelin · contractsAug 26, 2021

  • CVE-2021-41264
    39Monitor

    UUPSUpgradeable vulnerability in OpenZeppelin Contracts

    CriticalCVSS 9.8No exploitEPSS 1%

    openzeppelin · contractsNov 12, 2021

  • CVE-2023-30542
    35Monitor

    GovernorCompatibilityBravo may trim proposal calldata

    HighCVSS 8.8No exploitEPSS 1%

    openzeppelin · contractsApr 16, 2023

  • CVE-2021-46320
    30Monitor

    In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal p

    HighCVSS 7.5No exploitEPSS 1%

    openzeppelin · openzeppelinFeb 4, 2022

  • CVE-2022-31170
    30Monitor

    OpenZeppelin Contracts's ERC165Checker may revert instead of returning false

    HighCVSS 7.5No exploitEPSS 1%

    openzeppelin · contractsJul 22, 2022

  • CVE-2022-31198
    30Monitor

    GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts

    HighCVSS 7.5No exploitEPSS 1%

    openzeppelin · contractsAug 1, 2022

  • CVE-2023-49798
    30Monitor

    Duplicated execution of subcalls in OpenZeppelin Contracts

    HighCVSS 7.5No exploitEPSS 1%

    openzeppelin · contractsDec 8, 2023

  • CVE-2022-31172
    30Monitor

    OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers

    HighCVSS 7.5No exploitEPSS 0%

    openzeppelin · contractsJul 22, 2022

  • CVE-2024-27094
    29Monitor

    OpenZeppelin Contracts base64 encoding may read from potentially dirty memory

    HighCVSS 7.4No exploitEPSS 1%

    openzeppelin · contractsMar 20, 2024

  • CVE-2022-31153
    26Monitor

    OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

    MediumCVSS 6.5No exploitEPSS 1%

    openzeppelin · contractsJul 15, 2022

  • CVE-2023-26488
    26Monitor

    OpenZeppelin Contracts contains Incorrect Calculation

    MediumCVSS 6.5No exploitEPSS 1%

    openzeppelin · contractsMar 3, 2023

  • CVE-2024-45304
    26Monitor

    OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts

    MediumCVSS 6.5No exploitEPSS 0%

    openzeppelin · contractsAug 30, 2024

  • CVE-2022-35961
    26Monitor

    ECDSA signature malleability in OpenZeppelin Contracts

    MediumCVSS 6.5No exploitEPSS 0%

    openzeppelin · contractsAug 15, 2022

  • CVE-2023-34459
    23Monitor

    OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees

    MediumCVSS 5.9No exploitEPSS 0%

    openzeppelin · contractsJun 16, 2023

  • CVE-2022-39384
    22Monitor

    OpenZeppelin Contracts initializer reentrancy may lead to double initialization

    MediumCVSS 5.6No exploitEPSS 1%

    openzeppelin · contractsNov 4, 2022

  • CVE-2023-30541
    21Monitor

    TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contracts

    MediumCVSS 5.3No exploitEPSS 1%

    openzeppelin · contractsApr 17, 2023

  • CVE-2022-35915
    21Monitor

    Unbounded gas consumption in @openzeppelin/contracts

    MediumCVSS 5.3No exploitEPSS 1%

    openzeppelin · contractsAug 1, 2022

  • CVE-2023-40014
    21Monitor

    OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender

    MediumCVSS 5.3No exploitEPSS 1%

    openzeppelin · openzeppelin contractsAug 10, 2023

  • CVE-2023-34234
    21Monitor

    Governor proposal creation may be blocked by frontrunning in OpenZeppelin

    MediumCVSS 5.3No exploitEPSS 1%

    openzeppelin · contractsJun 7, 2023

  • CVE-2022-35916
    21Monitor

    Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls

    MediumCVSS 5.3No exploitEPSS 1%

    openzeppelin · contractsAug 1, 2022

  • CVE-2023-23940
    21Monitor

    OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass

    MediumCVSS 5.3No exploitEPSS 0%

    openzeppelin · contractsFeb 3, 2023