Known vulnerabilities in OpenZeppelin Contracts
Vendor:
OpenZeppelin
Software:
OpenZeppelin Contracts
Software CPE:
cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:*:*:*
Website:
https://www.openzeppelin.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
5.7.0
5.6.1
5.6.0
5.5.0
5.4.0
5.3.0
5.2.0
5.1.0
5.0.2
4.9.6
4.9.5
5.0.1
4.9.4
5.0.0
4.9.3
4.9.2
4.9.1
4.9.0
4.8.3
4.8.2
4.8.1
4.8.0
none
4.7.3
4.7.2
4.7.1
4.7.0
4.6.0
4.5.0
4.4.2
4.4.1
4.4.0
4.3.3
4.3.2
4.3.1
4.3.0
4.2.0
4.1.0
4.0.0
3.4.2
3.4.1
3.4.0
3.3.0
3.2.0
3.1.0
3.0.2
3.0.1
3.0.0
2.5.1
2.5.0
2.4.0
2.3.0
2.2.0
2.1.3
2.1.2
2.1.1
2.0.1
2.0.0
1.12.0
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86938 - Out-of-bounds read CVE-2024-27094 |
CWE-125 | Medium | 4.9.6, 5.0.2 | 01.03.2024 |
SB2024030115 |
||
| #VU72735 - Memory corruption CVE-2023-26488 |
CWE-119 | Medium | 4.8.2 | 03.03.2023 |
SB2023030311 SB2023030312 |
||
| #VU66783 - Resource exhaustion CVE-2022-35915 |
CWE-400 | Medium | 4.7.2 | 26.08.2022 |
SB2022082612 |
||
| #VU66782 - Incorrect Calculation CVE-2022-31198 |
CWE-682 | Medium | 4.7.2 | 26.08.2022 |
SB2022082612 |
||
| #VU66781 - Incorrect Resource Transfer Between Spheres CVE-2022-35916 |
CWE-669 | Medium | 4.7.2 | 26.08.2022 |
SB2022082612 |
||
| #VU66780 - Improper Validation of Integrity Check Value CVE-2022-35961 |
CWE-354 | Medium | 4.7.3 | 26.08.2022 |
SB2022082611 |