{"action":"Upgrade @openzeppelin/contracts-upgradeable to 4.7.1 or later.","affected":[{"fixed":"4.7.1","introduced":"4.0.0"}],"component":"@openzeppelin/contracts-upgradeable","cve_ids":["CVE-2022-31170"],"ecosystem":"npm","epss":0.00788,"exploited":false,"fixed_versions":["4.7.1"],"ghsa_id":"GHSA-qh9x-gcfh-pcrw","id":"tcs_01M5KG6735XVM8GWSSKMGAM6MD","modified_at":"2023-11-08T04:09:28.586055Z","published_at":"2022-07-21T22:33:01Z","references":["https://osv.dev/vulnerability/GHSA-qh9x-gcfh-pcrw","https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-qh9x-gcfh-pcrw","https://nvd.nist.gov/vuln/detail/CVE-2022-31170","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552","https://github.com/OpenZeppelin/openzeppelin-contracts"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qh9x-gcfh-pcrw#npm/@openzeppelin/contracts-upgradeable","url":"https://osv.dev/vulnerability/GHSA-qh9x-gcfh-pcrw"}],"summary":"OpenZeppelin Contracts's ERC165Checker may revert instead of returning false"}