{"action":"Upgrade @openzeppelin/wizard-stellar to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0"}],"component":"@openzeppelin/wizard-stellar","cve_ids":["CVE-2026-57583"],"ecosystem":"npm","epss":0.00187,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-9wxg-vf3r-56hc","id":"tcs_01M5KFH7YVCJS4S5PQAG6KQHM0","modified_at":"2026-09-15T03:56:01.702706709Z","published_at":"2026-06-19T17:45:15Z","references":["https://osv.dev/vulnerability/GHSA-9wxg-vf3r-56hc","https://github.com/OpenZeppelin/contracts-wizard/security/advisories/GHSA-9wxg-vf3r-56hc","https://github.com/OpenZeppelin/contracts-wizard"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-9wxg-vf3r-56hc#npm/@openzeppelin/wizard-stellar","url":"https://osv.dev/vulnerability/GHSA-9wxg-vf3r-56hc"}],"summary":"OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source"}