Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/11 1:27 p.m.11 views

GHSA-4X76-22X2-RX8V OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

Summary The OpenZeppelin Contracts Wizard generated Hardhat test/test.ts and Foundry test/.t.sol example test files that interpolated user-supplied strings opts.name, opts.uri into the test source without escaping. A crafted input could produce a generated test file in which the input string brok...

8.8CVSS5.3AI score0.0004EPSS
SaveExploits0References4
Rows per page
Query Builder