Openzeppelin

    Dashboard / Vendors

    Products: 9
    Vulnerabilities: 25
    Known Exploited: 0
    3
    Critical Level Threats
    6
    High Level Threats
    14
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-73645

    OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

    Last Modified: Aug 14, 2026
    Published: Aug 13, 2026

    CVE-2026-48054

    OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

    Last Modified: Aug 07, 2026
    Published: Aug 06, 2026

    CVE-2025-54070

    OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

    Last Modified: Apr 15, 2026
    Published: Jul 17, 2025

    CVE-2024-45304

    OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts

    Last Modified: Sep 19, 2024
    Published: Aug 30, 2024

    CVE-2024-27094

    OpenZeppelin Contracts base64 encoding may read from potentially dirty memory

    Last Modified: Dec 04, 2025
    Published: Feb 29, 2024
    Items Per Page
    Openzeppelin Vulnerabilities & Security CVEs | CVE-DB