CVE-2025-54070
- EPSS 0.05%
- Veröffentlicht 17.07.2025 18:25:02
- Zuletzt bearbeitet 17.07.2025 21:15:50
OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to version 5.4.0, the `lastIndexOf(bytes,byte,uint256)` function of the `Bytes.sol` library may access uninitialized memory when the follow...
CVE-2024-27094
- EPSS 0.56%
- Veröffentlicht 21.03.2024 02:52:18
- Zuletzt bearbeitet 04.12.2025 20:13:27
OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes` input by iterating over it in chunks of 3 bytes. When this input is not a multiple of 3, the last iteration may read parts of th...
CVE-2023-40014
- EPSS 0.6%
- Veröffentlicht 10.08.2023 20:15:10
- Zuletzt bearbeitet 21.11.2024 08:18:31
OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls ...