Openzeppelin Contracts-Upgradable vulnerabilities

1 known vulnerability affecting openzeppelin/openzeppelin_contracts-upgradable.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-40014MEDIUMCVSS 5.3≥ 4.0.0, < 4.9.32023-08-10

CVE-2023-40014 [MEDIUM] CWE-116 CVE-2023-40014: OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls that originate from the forwarder with calldata shorter than 20 bytes. This combination of circumstan