npm/@openzeppelin/confidential-contracts CVE-2026-73645: medium, EPSS 0.52%
ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.
Action: Upgrade @openzeppelin/confidential-contracts to 0.3.1 or later.
npm i @openzeppelin/confidential-contracts@0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: GHSA-hqf9-8xv5-x8xw
- https://github.com/OpenZeppelin/openzeppelin-confidential-contracts/security/advisories/GHSA-hqf9-8xv5-x8xw
- https://github.com/OpenZeppelin/openzeppelin-confidential-contracts
CVE-2026-73645 · published · modified · JSON