cbcvebase.

Openzeppelin Contracts vulnerabilities

1 known vulnerability affecting openzeppelin/openzeppelin_contracts.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2023-40014P4MEDIUMCVSS 5.3≥ 4.0.0, < 4.9.32023-08-10
CVE-2023-40014 [MEDIUM] CWE-116 CVE-2023-40014: OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls that originate from the forwarder with calldata shorter than 20 bytes. This combination of circumstan
nvd