tocsin

CVE-2022-35915

4 advisories.

npm/@openzeppelin/contracts CVE-2022-35915: medium 5.3

OpenZeppelin Contracts ERC165Checker unbounded gas consumption

Action: Upgrade @openzeppelin/contracts to 4.7.2 or later.

npm i @openzeppelin/contracts@4.7.2

Affected

introducedfixedlast affected
2.0.04.7.2-

Fixed versions

4.7.2

Sources

CVE-2022-35915 · published · modified · JSON

npm/openzeppelin-solidity CVE-2022-35915: medium 5.3

OpenZeppelin Contracts ERC165Checker unbounded gas consumption

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
2.0.0-4.6.0

Fixed versions

No fixed version in the source.

Sources

CVE-2022-35915 · published · modified · JSON

npm/@openzeppelin/contracts-upgradeable CVE-2022-35915: medium 5.3

OpenZeppelin Contracts ERC165Checker unbounded gas consumption

Action: Upgrade @openzeppelin/contracts-upgradeable to 4.7.2 or later.

npm i @openzeppelin/contracts-upgradeable@4.7.2

Affected

introducedfixedlast affected
3.2.04.7.2-

Fixed versions

4.7.2

Sources

CVE-2022-35915 · published · modified · JSON

npm/openzeppelin-eth CVE-2022-35915: medium 5.3

OpenZeppelin Contracts ERC165Checker unbounded gas consumption

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
2.0.0-2.2.0

Fixed versions

No fixed version in the source.

Sources

CVE-2022-35915 · published · modified · JSON