Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Contracts MEDIUM 6.5
CVE-2024-45304

Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup. This vulnerability can lead to unauthorized owne…

Fix: 0.16.0+
Fix from $1,600 2024-08-31
Contracts HIGH 7.4
CVE-2024-27094

OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes` input by iterating over it …

Fix: 4.9.6 / 5.0.2+
Fix from $1,950 2024-03-21
Contracts HIGH 7.5
CVE-2023-49798

OpenZeppelin Contracts is a library for smart contract development. A merge issue when porting the 5.0.1 patch to the 4.9 branch caused a line duplic…

Patch available
Fix from $1,950 2023-12-09
Openzeppelin Contracts MEDIUM 5.3
CVE-2023-40014

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC…

Fix: 4.9.3+
Fix from $1,600 2023-08-10
Contracts MEDIUM 5.9
CVE-2023-34459

OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the `verifyMultiProof`…

Fix: 4.9.2+
Fix from $1,600 2023-06-16
Contracts MEDIUM 5.3
CVE-2023-34234

OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an attacker can become the proposer a…

Fix: 4.9.1+
Fix from $1,600 2023-06-07
Contracts MEDIUM 5.3
CVE-2023-30541

OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may be inaccessible if its selec…

Fix: 4.8.3+
Fix from $1,600 2023-04-17
Contracts HIGH 8.8
CVE-2023-30542

OpenZeppelin Contracts is a library for secure smart contract development. The proposal creation entrypoint (`propose`) in `GovernorCompatibilityBrav…

Fix: 4.8.3+
Fix from $1,950 2023-04-16
Contracts MEDIUM 6.5
CVE-2023-26488

OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for minting NFTs in batches does n…

Fix: 4.8.2+
Fix from $1,600 2023-03-03
Contracts MEDIUM 5.3
CVE-2023-23940

OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. `is_val…

Fix: 0.6.1+
Fix from $1,600 2023-02-03
Contracts MEDIUM 5.6
CVE-2022-39384

OpenZeppelin Contracts is a library for secure smart contract development. Before version 4.4.1 but after 3.2.0, initializer functions that are invok…

Fix: 4.4.1+
Fix from $1,600 2022-11-04
Contracts MEDIUM 6.5
CVE-2022-35961

OpenZeppelin Contracts is a library for secure smart contract development. The functions `ECDSA.recover` and `ECDSA.tryRecover` are vulnerable to a k…

Fix: 4.7.3+
Fix from $1,600 2022-08-15
Contracts HIGH 7.5
CVE-2022-31198

OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module `GovernorVot…

Fix: 4.7.2+
Fix from $1,950 2022-08-01
Contracts MEDIUM 5.3
CVE-2022-35915

OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbo…

Fix: 4.7.2+
Fix from $1,600 2022-08-01
Contracts MEDIUM 5.3
CVE-2022-35916

OpenZeppelin Contracts is a library for secure smart contract development. Contracts using the cross chain utilities for Arbitrum L2, `CrossChainEnab…

Fix: 4.7.2+
Fix from $1,600 2022-08-01
Contracts HIGH 7.5
CVE-2022-31170

OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165Checker reverting instead of r…

Fix: 4.7.1+
Fix from $1,950 2022-07-22
Contracts HIGH 7.5
CVE-2022-31172

OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. `Sig…

Fix: 4.7.1+
Fix from $1,950 2022-07-22
Contracts MEDIUM 6.5
CVE-2022-31153

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vul…

Patch available
Fix from $1,600 2022-07-15
Openzeppelin HIGH 7.5
CVE-2021-46320

In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) m…

Fix: after 4.4.0
Fix from $1,950 2022-02-04
Contracts CRITICAL 9.8
CVE-2021-41264

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnera…

Fix: 4.3.2+
Fix from $2,300 2021-11-12
Contracts CRITICAL 9.8
CVE-2021-39168

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executo…

Fix: 3.4.2 / 4.3.1+
Fix from $2,300 2021-08-27
Contracts CRITICAL 9.8
CVE-2021-39167

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executo…

Fix: 3.4.2 / 4.3.1+
Fix from $2,300 2021-08-27