{"action":"Upgrade @openzeppelin/contracts to 4.8.3 or later.","affected":[{"fixed":"4.8.3","introduced":"3.2.0"}],"component":"@openzeppelin/contracts","cve_ids":["CVE-2023-30541"],"ecosystem":"npm","epss":0.00812,"exploited":false,"fixed_versions":["4.8.3"],"ghsa_id":"GHSA-mx2q-35m2-x2rh","id":"tcs_01M5KG2087HN4VC9TP1GYDTXZX","modified_at":"2026-09-10T03:50:01.099654307Z","published_at":"2023-04-17T16:45:21Z","references":["https://osv.dev/vulnerability/GHSA-mx2q-35m2-x2rh","https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh","https://nvd.nist.gov/vuln/detail/CVE-2023-30541","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/58fa0f81c4036f1a3b616fdffad2fd27e5d5ce21","https://github.com/OpenZeppelin/openzeppelin-contracts","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mx2q-35m2-x2rh","url":"https://osv.dev/vulnerability/GHSA-mx2q-35m2-x2rh"}],"summary":"OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated"}