Report vulnerabilities privately to security@openzeppelin.com. Keep vulnerability details private across all channels until maintainers coordinate public disclosure.
Repository navigation
Security: OpenZeppelin/cairo-contracts
Security
SECURITY.md
-
OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownershipGHSA-w2px-25pm-2cf9 published
Aug 30, 2024 by ggonzalez94Moderate -
EthAccount can be impersonated by malicious proverGHSA-626q-v9j4-mcp4 published
Feb 1, 2023 by martriayModerate -
Account cannot process transactions on GoerliGHSA-8mjr-jr5h-q2xr published
Jul 14, 2022 by martriayCritical
Learn more about advisories related to OpenZeppelin/cairo-contracts in the GitHub Advisory Database