Openzeppelin

    Dashboard / Vendors

    Products: 13
    Vulnerabilities: 26
    Known Exploited: 0
    3
    Critical Level Threats
    6
    High Level Threats
    14
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-57583

    OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source

    Last Modified: Sep 17, 2026
    Published: Sep 14, 2026

    CVE-2026-73645

    OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

    Last Modified: Aug 14, 2026
    Published: Aug 13, 2026

    CVE-2026-48054

    OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

    Last Modified: Sep 14, 2026
    Published: Aug 06, 2026

    CVE-2025-54070

    OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

    Last Modified: Apr 15, 2026
    Published: Jul 17, 2025

    CVE-2024-45304

    OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts

    Last Modified: Sep 19, 2024
    Published: Aug 30, 2024
    Items Per Page
    Openzeppelin Vulnerabilities & Security CVEs | CVE-DB