Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Out-of-bounds Read
@openzeppelin/contracts>=4.5.0 <4.9.6>=5.0.0-rc.0 <5.0.2npm1 Mar 2024
  • M
Always-Incorrect Control Flow Implementation
@openzeppelin/contracts>=4.9.4 <4.9.5npm10 Dec 2023
  • M
Improper Encoding or Escaping of Output
@openzeppelin/contracts>=4.0.0 <4.9.3npm11 Aug 2023
  • M
Improper Input Validation
@openzeppelin/contracts>=4.7.0 <4.9.2npm18 Jun 2023
  • L
Missing Authorization
@openzeppelin/contracts>=4.3.0 <4.9.1npm8 Jun 2023
  • L
Denial of Service (DoS)
@openzeppelin/contracts>=3.2.0 <4.8.3npm18 Apr 2023
  • M
Improper Input Validation
@openzeppelin/contracts>=4.3.0 <4.8.3npm16 Apr 2023
  • M
Incorrect Calculation
@openzeppelin/contracts>=4.8.0 <4.8.2npm5 Mar 2023
  • M
Incorrect Calculation
@openzeppelin/contracts>=4.8.0 <4.8.2npm5 Mar 2023
  • H
Improper Verification of Cryptographic Signature
@openzeppelin/contracts<4.7.3npm14 Aug 2022
  • M
Denial of Service (DoS)
@openzeppelin/contracts>=2.3.0 <4.7.2npm2 Aug 2022
  • L
Incorrect Resource Transfer Between Spheres
@openzeppelin/contracts>=4.6.0 <4.7.2npm2 Aug 2022
  • H
Incorrect Calculation
@openzeppelin/contracts>=4.3.0 <4.7.2npm2 Aug 2022
  • H
Information Exposure
@openzeppelin/contracts>=4.1.0 <4.7.1npm22 Jul 2022
  • H
Information Exposure
@openzeppelin/contracts>=4.0.0 <4.7.1npm22 Jul 2022
  • M
Function Call With Incorrect Argument
@openzeppelin/contracts>=4.3.0 <4.4.2npm12 Jan 2022
  • H
Deserialization of Untrusted Data
@openzeppelin/contracts>=3.2.0 <4.4.1npm15 Dec 2021
  • H
Deserialization of Untrusted Data
@openzeppelin/contracts>=3.2.0 <4.4.1npm15 Dec 2021
  • M
Numeric Errors
@openzeppelin/contracts>=4.2.0 <4.3.3npm16 Nov 2021
  • C
Improper Initialization
@openzeppelin/contracts>=4.1.0 <4.3.2npm15 Nov 2021
  • H
Improper Input Validation
@openzeppelin/contracts>=4.1.0 <4.3.2npm16 Sept 2021
  • C
Privilege Escalation
@openzeppelin/contracts>=4.0.0-beta.0 <4.3.1<3.4.2npm27 Aug 2021
  • M
Improper Synchronization
@openzeppelin/contracts<3.4.0-rc.0npm27 Jan 2021
  • M
Out-of-bounds Read
@openzeppelin/contracts-upgradeable>=4.5.0 <4.9.6>=5.0.0-rc.0 <5.0.2npm1 Mar 2024
  • M
Always-Incorrect Control Flow Implementation
@openzeppelin/contracts-upgradeable>=4.9.4 <4.9.5npm10 Dec 2023
  • M
Improper Encoding or Escaping of Output
@openzeppelin/contracts-upgradeable>=4.0.0 <4.9.3npm11 Aug 2023
  • M
Improper Input Validation
@openzeppelin/contracts-upgradeable>=4.7.0 <4.9.2npm18 Jun 2023
  • L
Missing Authorization
@openzeppelin/contracts-upgradeable>=4.3.0 <4.9.1npm8 Jun 2023
  • L
Denial of Service (DoS)
@openzeppelin/contracts-upgradeable>=3.2.0 <4.8.3npm18 Apr 2023
  • M
Improper Input Validation
@openzeppelin/contracts-upgradeable>=4.3.0 <4.8.3npm16 Apr 2023