@openzeppelin/contracts
npmlatest 5.6.1 · 2026-02-27www.npmjs.com · all 104 versions
Security advisories14
- @openzeppelin/contracts: OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signersfixed in 4.7.1
- @openzeppelin/contracts: OpenZeppelin Contracts vulnerable to ECDSA signature malleabilityfixed in 4.7.3
- @openzeppelin/contracts: OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunningfixed in 4.9.1
- @openzeppelin/contracts: OpenZeppelin Contracts ERC165Checker unbounded gas consumptionfixed in 4.7.2
- @openzeppelin/contracts: OpenZeppelin Contracts contains Incorrect Calculationfixed in 4.8.2
- @openzeppelin/contracts: Improper Initialization in OpenZeppelinfixed in 4.4.1
- @openzeppelin/contracts: GovernorCompatibilityBravo may trim proposal calldatafixed in 4.8.3
- @openzeppelin/contracts: OpenZeppelin Contracts base64 encoding may read from potentially dirty memoryfixed in 4.9.6, 5.0.2
- @openzeppelin/contracts: OpenZeppelin Contracts vulnerable to Improper Escaping of Outputfixed in 4.9.3
- @openzeppelin/contracts: GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behaviorfixed in 4.4.2
- @openzeppelin/contracts: OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegatedfixed in 4.8.3
- @openzeppelin/contracts: OpenZeppelin Contracts's ERC165Checker may revert instead of returning falsefixed in 4.7.1
- @openzeppelin/contracts: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific treesfixed in 4.9.2
- @openzeppelin/contracts: OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposalsfixed in 4.7.2
Versions that change something
- 4.4.12021-12fixes 1 advisory
- 4.4.22022-01fixes 1 advisory
- 4.7.12022-07fixes 2 advisories
- 4.7.22022-07fixes 2 advisories