Skip to content

Product

openzeppelin-eth vulnerabilities

1 published CVE affecting openzeppelin-eth, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest openzeppelin-eth CVEs

Newest publication first

  1. CVE-2022-35915 Unbounded gas consumption in @openzeppelin/contracts

    Published
    MediumCVSS 5.3 EPSS 0.80%

    OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 supportsInterface query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.