Vulnerabilities in OpenZeppelin

25 results
CVE-2022-35961HIGHECDSA signature malleability in OpenZeppelin ContractsEPSS 0.5%CVE-2025-54070MEDIUMOpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffersEPSS 0.4%CVE-2023-34459MEDIUMOpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific treesEPSS 0.4%CVE-2023-23940MEDIUMOpenZeppelin Contracts for Cairo is vulnerable to signature validation bypassEPSS 0.2%CVE-2026-57583LOWOpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated sourceEPSS 0.2%