@openzeppelin/contracts-upgradeable@4.8.1 vulnerabilities
Secure Smart Contract library for Solidity
-
latest version
4.8.2
-
latest non vulnerable version
-
first published
2 years ago
-
latest version published
a month ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @openzeppelin/contracts-upgradeable package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
@openzeppelin/contracts-upgradeable is a Secure Smart Contract library for Solidity.
Affected versions of this package are vulnerable to Incorrect Calculation. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch have size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by How to fix Incorrect Calculation? Upgrade |
>=4.8.0 <4.8.2
|
@openzeppelin/contracts-upgradeable is a Secure Smart Contract library for Solidity.
Affected versions of this package are vulnerable to Incorrect Calculation. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch have size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by How to fix Incorrect Calculation? Upgrade |
>=4.8.0 <4.8.2
|