Openzeppelin Openzeppelin-Eth vulnerabilities

1 known vulnerability affecting openzeppelin/openzeppelin-eth.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-35915MEDIUMCVSS 5.3≥ 2.0.02022-08-01

CVE-2022-35915 [MEDIUM] CWE-400 CVE-2022-35915: OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has been fixed in v4.7.2. Users are advised to upgrade. There are no kno