CVE-2021-41264

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using "UUPSUpgradeable" may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of "@openzeppelin/contracts" and...

PT-2021-24448

Name of the Vulnerable Software and Affected Versions: @openzeppelin/contracts versions prior to 4.3.2 @openzeppelin/contracts-upgradeable versions prior to 4.3.2 Description: The issue affects upgradeable contracts using UUPSUpgradeable and may lead to an attack on uninitialized implementation...