Vulnerability Database

With exploit

openzeppelin / contracts

Title Severity Exploit Date Affected Version
CVE-2024-45304 Medium Aug 31, 2024 < 0.16.0
CVE-2023-49798 Medium Dec 9, 2023 == 4.9.4
CVE-2023-34459 Medium Jun 16, 2023 >= 4.7.0 < 4.9.2
CVE-2023-34234 Medium Jun 7, 2023 >= 4.3.0 < 4.9.1
CVE-2023-30541 Medium Apr 17, 2023 >= 3.2.0 < 4.8.3
CVE-2023-30542 Medium Apr 16, 2023 >= 4.3.0 < 4.8.3
CVE-2023-26488 Medium Mar 3, 2023 >= 4.8.0 < 4.8.2
CVE-2023-23940 Medium Feb 3, 2023 >= 0.2.0 < 0.6.1
CVE-2022-39384 Medium Nov 4, 2022 >= 3.2.0 < 4.4.1
CVE-2022-35961 High Aug 15, 2022 >= 4.1.0 < 4.7.3

Node.js icon @openzeppelin / contracts

Title Severity Exploit Date Affected Version
CVE-2025-54070 Medium Jul 17, 2025 >= 5.2.0 < 5.4.0
CVE-2024-27094 Medium Mar 21, 2024 >= 4.5.0 < 4.9.6
>= 5.0.0-rc.0 < 5.0.2
CVE-2023-49798 Medium Dec 9, 2023 == 4.9.4
>= 4.9.4 < 4.9.5
CVE-2023-40014 Medium Aug 10, 2023 >= 4.0.0 < 4.9.3
CVE-2023-34459 Medium Jun 16, 2023 >= 4.7.0 < 4.9.2
CVE-2023-34234 Medium Jun 7, 2023 >= 4.3.0 < 4.9.1
CVE-2023-30541 Medium Apr 17, 2023 >= 3.2.0 < 4.8.3
CVE-2023-30542 Medium Apr 16, 2023 >= 4.3.0 < 4.8.3
CVE-2023-26488 Medium Mar 3, 2023 >= 4.8.0 < 4.8.2
CVE-2022-39384 Medium Nov 4, 2022 >= 3.2.0 < 4.4.1

Node.js icon @liquity / contracts

Title Severity Exploit Date Affected Version
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode Low Aug 5, 2021 <= 1.0.0