Lucene search
K

4 matches found

Veracode
Veracode
•added 2023/04/24 2:52 a.m.•18 views

Interpretation Conflict

@openzeppelin/contracts is vulnerable to Interpretation Conflict. The vulnerability exists because the TransparentUpgradeableProxy clashing selector calls may not be delegated if the clashing function has a different signature with incompatible ABI encoding, which could lead to proxy revert while...

5.3CVSS5.4AI score0.00452EPSS
Exploits0References5Affected Software4
Github Security Blog
Github Security Blog
•added 2023/04/17 4:45 p.m.•24 views

OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated

Impact A function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the arguments from...

5.3CVSS5.9AI score0.00452EPSS
Exploits0References6Affected Software2
OSV
OSV
•added 2023/04/17 4:45 p.m.•17 views

GHSA-MX2Q-35M2-X2RH OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated

Impact A function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the arguments from...

5.3CVSS5AI score0.00452EPSS
Exploits0References6
Code423n4
Code423n4
•added 2023/03/30 12:0 a.m.•8 views

Derivative Pool Issue can Lead to Loss User Funds when Unstaking

Lines of code Vulnerability details Impact In all withdraw functions of derivatives, there is no check for sending zero Ether back to the safEth contract. It is important to note that the addressmsg.sender.callvalue: 0"" function returns true even when transferring a zero value. On the other hand...

6.7AI score
Exploits0
Rows per page
Query Builder