PatchTheCVEopenzeppelin vulnerabilities
Recent CVEs affecting openzeppelin products. 3 tracked.
openzeppelin has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-31. Highest priority: CVE-2024-27094 (score 42/100).
- CVE-2024-45304 MEDIUM 5.3 UPGRADE Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup
- CVE-2024-27094 MEDIUM 6.5 UPGRADE UPGRADE OpenZeppelin Contracts is a library for secure smart contract development
- CVE-2023-49798 MEDIUM 5.9 DOWNGRADE DOWNGRADE OpenZeppelin Contracts is a library for smart contract development
FAQ
How do I fix openzeppelin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openzeppelin being exploited right now?
None of the tracked openzeppelin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openzeppelin CVE should I patch first?
CVE-2024-27094 currently ranks highest (42/100): OpenZeppelin Contracts is a library for secure smart contract development.