578 matches found
CVE-2021-41264
OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using UUPSUpgradeable may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of @openzeppelin/contracts and...
CVE-2022-31170
OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165Checker reverting instead of returning false. ERC165Checker.supportsInterface is designed to always successfully return a boolean, and under no circumstance revert. However, an...
CVE-2022-31198
OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module GovernorVotesQuorumFraction, a mechanism that determines quorum requirements as a percentage of the voting token's total supply. In affected instances, when a...
CVE-2022-35961
OpenZeppelin Contracts is a library for secure smart contract development. The functions ECDSA.recover and ECDSA.tryRecover are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 byte signature format. This is only an issu...
@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via @openzeppelin/confidential-contracts (0.3.0)
@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory:...
@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-73645 via @openzeppelin/confidential-contracts (0.3.0)
@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: CVE-2026-73645 Source advisory:...
Malicious Package
Overview solhint-plugin-openzeppelin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2021-1988
Malware in sbrugna...
EUVD-2021-2492
Malware in sbrugna...
EUVD-2022-6398
Malicious code in bioql PyPI...
EUVD-2023-1247
Malicious code in bioql PyPI...
EUVD-2023-1907
Malicious code in bioql PyPI...
EUVD-2023-1704
Malicious code in bioql PyPI...
EUVD-2022-6503
Malicious code in bioql PyPI...
EUVD-2022-6227
Malicious code in bioql PyPI...
EUVD-2022-6478
Malicious code in bioql PyPI...
EUVD-2023-0188
Malicious code in bioql PyPI...
EUVD-2022-6524
Malicious code in bioql PyPI...