Openzeppelin Contracts vulnerabilities

CVE-2023-34234 [MEDIUM] CWE-862 CVE-2023-34234: OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an attacker can become the proposer and gain the ability to cancel it. The attacker can do this repeatedly to try to prevent a proposal from being proposed at all. This impacts the `Governor` contract in v4.9.0 only, and the `GovernorCompat

CVE-2023-30541 [MEDIUM] CWE-436 CVE-2023-30541: OpenZeppelin Contracts is a library for secure smart contract development. A function in the impleme OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the

CVE-2023-40014 [MEDIUM] CWE-116 OpenZeppelin Contracts vulnerable to Improper Escaping of Output OpenZeppelin Contracts vulnerable to Improper Escaping of Output ### Impact OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls that originate from the forwarder with calldata shorter than 20 bytes. This