OpenZeppelin Known Vulnerabilities

Find the version that the project you currently develop or audit uses and quickly check which are the known smart contract security vulnerabilities that may affect your code.

Source: https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories
Repository: https://github.com/OpenZeppelin/openzeppelin-contracts

5.0.0 (0)

• none

4.9.3 (0)

• none

4.9.2 (1)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender

4.9.1 (2)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees

4.9.0 (3)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning

4.8.3 (3)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning

4.8.2 (5)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning
• TransparentUpgradeableProxy clashing selector calls may not be delegated
• GovernorCompatibilityBravo may trim proposal calldata

4.8.1 (6)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning
• TransparentUpgradeableProxy clashing selector calls may not be delegated
• GovernorCompatibilityBravo may trim proposal calldata
• ERC721Consecutive incorrect balance update with batch of 1

4.8.0 (6)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning
• TransparentUpgradeableProxy clashing selector calls may not be delegated
• GovernorCompatibilityBravo may trim proposal calldata
• ERC721Consecutive incorrect balance update with batch of 1

4.7.3 (5)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning
• TransparentUpgradeableProxy clashing selector calls may not be delegated
• GovernorCompatibilityBravo may trim proposal calldata

4.7.2 (6)

• ERC2771Context with custom forwarder may lead to zero-valued _msgSender
• MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
• Governor proposal creation may be blocked by frontrunning
• TransparentUpgradeableProxy clashing selector calls may not be delegated
• GovernorCompatibilityBravo may trim proposal calldata
• ECDSA signature malleability