Homepage

@openzeppelin/contracts-upgradeable vulnerabilities

Secure Smart Contract library for Solidity

  • latest version

    5.1.0

  • latest non vulnerable version

    5.2.0-rc.1

  • first published

    4 years ago

  • latest version published

    2 months ago

  • licenses detected

  • View contracts-upgradeable package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @openzeppelin/contracts-upgradeable package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Out-of-bounds Read

    >=4.5.0 <4.9.6>=5.0.0-rc.0 <5.0.2
    • M
    Always-Incorrect Control Flow Implementation

    >=4.9.4 <4.9.5
    • M
    Improper Encoding or Escaping of Output

    >=4.0.0 <4.9.3
    • M
    Improper Input Validation

    >=4.7.0 <4.9.2
    • L
    Missing Authorization

    >=4.3.0 <4.9.1
    • L
    Denial of Service (DoS)

    >=3.2.0 <4.8.3
    • M
    Improper Input Validation

    >=4.3.0 <4.8.3
    • M
    Incorrect Calculation

    >=4.8.0 <4.8.2
    • M
    Incorrect Calculation

    >=4.8.0 <4.8.2
    • H
    Improper Verification of Cryptographic Signature

    <4.7.3
    • M
    Denial of Service (DoS)

    >=3.2.0 <4.7.2
    • L
    Incorrect Resource Transfer Between Spheres

    >=4.6.0 <4.7.2
    • H
    Incorrect Calculation

    >=4.3.0 <4.7.2
    • H
    Information Exposure

    >=4.1.0 <4.7.1
    • H
    Information Exposure

    >=4.0.0 <4.7.1
    • M
    Function Call With Incorrect Argument

    >=4.3.0 <4.4.2
    • H
    Deserialization of Untrusted Data

    >=3.2.0 <4.4.1
    • H
    Deserialization of Untrusted Data

    >=3.2.0 <4.4.1
    • M
    Numeric Errors

    >=4.2.0 <4.3.3
    • C
    Improper Initialization

    >=4.1.0 <4.3.2
    • H
    Improper Input Validation

    >=4.1.0 <4.3.2
    • C
    Privilege Escalation

    >=4.0.0-beta.0 <4.3.1<3.4.2

    Package versions

    1 - 65 of 65 Results
    versionpublisheddirect vulnerabilities
    5.2.0-rc.116 Dec, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    5.2.0-rc.05 Dec, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    5.1.017 Oct, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    5.1.0-rc.03 Oct, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    5.0.229 Feb, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    5.0.17 Dec, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.0.05 Oct, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.0.0-rc.22 Oct, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.0.0-rc.129 Sep, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.0.0-rc.019 Sep, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    4.9.629 Feb, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    4.9.58 Dec, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    4.9.48 Dec, 2023
    • 0
      C
    • 0
      H
    • 2
      M
    • 0
      L
    4.9.328 Jul, 2023
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    4.9.216 Jun, 2023
    • 0
      C
    • 0
      H
    • 2
      M
    • 0
      L
    4.9.17 Jun, 2023
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    4.9.023 May, 2023
    • 0
      C
    • 0
      H
    • 3
      M
    • 1
      L
    4.9.0-rc.117 May, 2023
    • 0
      C
    • 0
      H
    • 3
      M
    • 1
      L
    4.9.0-rc.09 May, 2023
    • 0
      C
    • 0
      H
    • 3
      M
    • 1
      L
    4.8.313 Apr, 2023
    • 0
      C
    • 0
      H
    • 3
      M
    • 1
      L
    4.8.22 Mar, 2023
    • 0
      C
    • 0
      H
    • 4
      M
    • 2
      L
    4.8.113 Jan, 2023
    • 0
      C
    • 0
      H
    • 6
      M
    • 2
      L
    4.8.08 Nov, 2022
    • 0
      C
    • 0
      H
    • 6
      M
    • 2
      L
    4.8.0-rc.225 Oct, 2022
    • 0
      C
    • 0
      H
    • 4
      M
    • 2
      L
    4.8.0-rc.124 Sep, 2022
    • 0
      C
    • 0
      H
    • 4
      M
    • 2
      L
    4.8.0-rc.013 Sep, 2022
    • 0
      C
    • 0
      H
    • 4
      M
    • 2
      L
    4.7.310 Aug, 2022
    • 0
      C
    • 0
      H
    • 4
      M
    • 2
      L
    4.7.227 Jul, 2022
    • 0
      C
    • 1
      H
    • 4
      M
    • 2
      L
    4.7.120 Jul, 2022
    • 0
      C
    • 2
      H
    • 5
      M
    • 3
      L
    4.7.030 Jun, 2022
    • 0
      C
    • 4
      H
    • 5
      M
    • 3
      L
    4.7.0-rc.010 Jun, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 3
      L
    4.6.02 May, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 3
      L
    4.6.0-rc.01 Apr, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 2
      L
    4.5.22 Mar, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 2
      L
    4.5.111 Feb, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 2
      L
    4.5.09 Feb, 2022
    • 0
      C
    • 4
      H
    • 4
      M
    • 2
      L
    4.5.0-rc.013 Jan, 2022
    • 0
      C
    • 4
      H
    • 3
      M
    • 2
      L
    4.4.211 Jan, 2022
    • 0
      C
    • 4
      H
    • 3
      M
    • 2
      L
    4.4.114 Dec, 2021
    • 0
      C
    • 4
      H
    • 4
      M
    • 2
      L
    4.4.025 Nov, 2021
    • 0
      C
    • 6
      H
    • 4
      M
    • 2
      L
    4.4.0-rc.116 Nov, 2021
    • 0
      C
    • 6
      H
    • 4
      M
    • 2
      L
    4.3.312 Nov, 2021
    • 0
      C
    • 6
      H
    • 4
      M
    • 2
      L
    4.3.214 Sep, 2021
    • 0
      C
    • 6
      H
    • 5
      M
    • 2
      L
    4.3.126 Aug, 2021
    • 1
      C
    • 7
      H
    • 5
      M
    • 2
      L
    4.3.017 Aug, 2021
    • 2
      C
    • 7
      H
    • 5
      M
    • 2
      L
    4.3.0-rc.011 Aug, 2021
    • 2
      C
    • 6
      H
    • 3
      M
    • 1
      L
    4.2.07 Jul, 2021
    • 2
      C
    • 6
      H
    • 3
      M
    • 1
      L
    4.1.029 Apr, 2021
    • 2
      C
    • 6
      H
    • 2
      M
    • 1
      L
    4.1.0-rc.026 Apr, 2021
    • 1
      C
    • 4
      H
    • 2
      M
    • 1
      L
    4.0.023 Mar, 2021
    • 1
      C
    • 4
      H
    • 2
      M
    • 1
      L
    4.0.0-rc.012 Mar, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    4.0.0-beta.024 Feb, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.226 Aug, 2021
    • 0
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.2-solc-0.726 Aug, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.13 Mar, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.1-solc-0.7-24 Mar, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.1-solc-0.73 Mar, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.02 Feb, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.0-solc-0.7-22 Feb, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.0-solc-0.72 Feb, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.4.0-rc.02 Feb, 2021
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.3.027 Nov, 2020
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.3.0-solc-0.727 Nov, 2020
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.2.2-solc-0.716 Nov, 2020
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L
    3.2.012 Nov, 2020
    • 1
      C
    • 3
      H
    • 1
      M
    • 1
      L