PyPI/openzeppelin-cairo-contracts CVE-2022-31153: medium 6.5, EPSS 1.46%

OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

Action: Upgrade openzeppelin-cairo-contracts to 0.2.1 or later.

pip install openzeppelin-cairo-contracts==0.2.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-890
• https://github.com/OpenZeppelin/cairo-contracts/security/advisories/GHSA-8mjr-jr5h-q2xr
• https://nvd.nist.gov/vuln/detail/CVE-2022-31153
• https://github.com/OpenZeppelin/cairo-contracts/issues/386
• https://github.com/OpenZeppelin/cairo-contracts/pull/387
• https://github.com/OpenZeppelin/cairo-contracts/commit/2cd60279c3332285d47edf9ee3888b71257acdc9
• https://github.com/OpenZeppelin/cairo-contracts
• https://github.com/OpenZeppelin/cairo-contracts/blob/release-0.2.0/src/openzeppelin/account/library.cairo#L203
• https://github.com/OpenZeppelin/cairo-contracts/releases/tag/v0.2.1
• https://github.com/pypa/advisory-database/tree/main/vulns/openzeppelin-cairo-contracts-test/PYSEC-2022-43143.yaml
• https://pypi.org/project/openzeppelin-cairo-contracts
• https://github.com/advisories/GHSA-8mjr-jr5h-q2xr

CVE-2022-31153 · published 2026-07-06T08:03:31.343815Z · modified 2026-07-07T11:45:16.088226891Z · JSON