Vulnerability Database

Node.js icon @openzeppelin / contracts-upgradeable

Title Severity Exploit Date Affected Version
CVE-2025-54070 Medium Jul 17, 2025 >= 5.2.0 < 5.4.0
CVE-2024-27094 Medium Mar 21, 2024 >= 5.0.0-rc.0 < 5.0.2
>= 4.5.0 < 4.9.6
CVE-2023-49798 Medium Dec 9, 2023 == 4.9.4
>= 4.9.4 < 4.9.5
CVE-2023-40014 Medium Aug 10, 2023 >= 4.0.0 < 4.9.3
CVE-2023-34459 Medium Jun 16, 2023 >= 4.7.0 < 4.9.2
CVE-2023-34234 Medium Jun 7, 2023 >= 4.3.0 < 4.9.1
CVE-2023-30541 Medium Apr 17, 2023 >= 3.2.0 < 4.8.3
CVE-2023-30542 Medium Apr 16, 2023 >= 4.3.0 < 4.8.3
CVE-2023-26488 Medium Mar 3, 2023 >= 4.8.0 < 4.8.2
CVE-2022-39384 Medium Nov 4, 2022 >= 3.2.0 < 4.4.1

openzeppelin / contracts_upgradeable

Title Severity Exploit Date Affected Version
CVE-2023-49798 Medium Dec 9, 2023 == 4.9.4
CVE-2023-34459 Medium Jun 16, 2023 >= 4.7.0 < 4.9.2
CVE-2023-34234 Medium Jun 7, 2023 >= 4.3.0 < 4.9.1
CVE-2023-30541 Medium Apr 17, 2023 >= 3.2.0 < 4.8.3
CVE-2023-30542 Medium Apr 16, 2023 >= 4.3.0 < 4.8.3
CVE-2023-26488 Medium Mar 3, 2023 >= 4.8.0 < 4.8.2
CVE-2022-39384 Medium Nov 4, 2022 >= 3.2.0 < 4.4.1
CVE-2022-35961 High Aug 15, 2022 >= 4.1.0 < 4.7.3
CVE-2022-31198 High Aug 1, 2022 >= 4.3.0 < 4.7.2
CVE-2022-35915 Medium Aug 1, 2022 >= 3.2.0 < 4.7.2