Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/06/19 5:45 p.m.•32 views

OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source

Summary The Contracts Wizard generators printed info.securityContact and info.license verbatim into a single-line comment of the generated Solidity, Cairo, Stellar/Soroban, and Stylus source without rejecting line terminators. A newline \n or \r\n in either field ends the comment, so the text aft...

6.1AI score
SaveExploits0References2Affected Software4
Rows per page
Query Builder