Openzeppelin Openzeppelin-Contracts-Upgradeable vulnerabilities

1 known vulnerability affecting openzeppelin/openzeppelin-contracts-upgradeable.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-39168CRITICALCVSS 9.8v>=4.0.0, < 4.3.1v>=3.3.0, < 3.4.2+1 more2021-08-27
CVE-2021-39168 [CRITICAL] CWE-269 CVE-2021-39168: OpenZepplin is a library for smart contract development. In affected versions a vulnerability in Tim OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a workaround revoke the executor role from accounts not strictly under the team's control.
nvd