@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees (moderate). GHSA-wprv-93r4-jj2p, CVE-2023-34459.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?