tocsin

npm/@openzeppelin/confidential-contracts: high

OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet

Action: Upgrade @openzeppelin/confidential-contracts to 0.3.2 or later.

npm i @openzeppelin/confidential-contracts@0.3.2
npm i @openzeppelin/confidential-contracts@0.4.2
npm i @openzeppelin/confidential-contracts@0.5.2

Affected

introducedfixedlast affected
00.3.2-
0.4.0-rc.00.4.2-
0.5.0-rc.00.5.2-

Fixed versions

0.3.20.4.20.5.2

Sources

published · modified · JSON