{"action":"Upgrade @openzeppelin/contracts-upgradeable to 4.8.2 or later.","affected":[{"fixed":"4.8.2","introduced":"4.8.0"}],"component":"@openzeppelin/contracts-upgradeable","cve_ids":["CVE-2023-26488"],"ecosystem":"npm","epss":0.00713,"exploited":false,"fixed_versions":["4.8.2"],"ghsa_id":"GHSA-878m-3g6q-594q","id":"tcs_01M5KFC45F8DFVYF03N4KPJP44","modified_at":"2023-11-08T04:12:02.209796Z","published_at":"2023-03-03T20:02:16Z","references":["https://osv.dev/vulnerability/GHSA-878m-3g6q-594q","https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-878m-3g6q-594q","https://nvd.nist.gov/vuln/detail/CVE-2023-26488","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/167bf67ed3907f4a674043496019fa346cee7705","https://github.com/OpenZeppelin/openzeppelin-contracts","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-878m-3g6q-594q#npm/@openzeppelin/contracts-upgradeable","url":"https://osv.dev/vulnerability/GHSA-878m-3g6q-594q"}],"summary":"OpenZeppelin Contracts contains Incorrect Calculation"}