OpenZeppelin/openzeppelin-contracts-upgradeable
GitHub
Releases150
Frequency3 weeks 1 day
Last Release
Stars1.17K
Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 6.5 MEDIUM | — | ||
OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes` input by iterating over it in chunks of 3 bytes. When this input is not a multiple of 3, the last iteration may read parts of the memory that are beyond the input buffer. The vulnerability is fixed in 5.0.2 and 4.9.6. | |||