Vulnerabilities in OpenZeppelin

22 results
CVE-2025-54070MEDIUMOpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffersEPSS 0.3%CVE-2023-23940MEDIUMOpenZeppelin Contracts for Cairo is vulnerable to signature validation bypassEPSS 0.2%