CVE-2026-73645

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total supply with an euint64 value, and an overflowing internal mint operation could fail silently. The wrap and onTransferReceiv...

CVE-2026-73645

OpenZeppelin Confidential Contracts ERC7984 wrapper contains a defect prior to 0.3.1 where an overflowing internal _mint on the ERC7984ERC20Wrapper could silently fail. The wrap and onTransferReceived paths did not handle this failure, allowing a user to transfer the underlying token without rece...

@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via @openzeppelin/confidential-contracts (0.3.0)

@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory:...

@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-73645 via @openzeppelin/confidential-contracts (0.3.0)

@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: CVE-2026-73645 Source advisory:...