Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9pnw-9buy-5kab
Summary
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
### Impact

This issue concerns instances of Governor that use the module `GovernorVotesQuorumFraction`, a mechanism that determines quorum requirements as a percentage of the voting token's total supply. In affected instances, when a proposal is passed to lower the quorum requirement, past proposals may become executable if they had been defeated only due to lack of quorum, and the number of votes it received meets the new quorum requirement.

Analysis of instances on chain found only one proposal that met this condition, and we are actively monitoring for new occurrences of this particular issue.

### Patches

This issue has been patched in v4.7.2.

### Workarounds

Avoid lowering quorum requirements if a past proposal was defeated for lack of quorum.

### References

https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561

### For more information

If you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).
Aliases
0
alias CVE-2022-31198
1
alias GHSA-xrc4-737v-9q75
Fixed_packages
0
url pkg:npm/%40openzeppelin/contracts@4.7.2
purl pkg:npm/%40openzeppelin/contracts@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hqyw-2vt2-tfcn
1
vulnerability VCID-mshr-yc9h-jufk
2
vulnerability VCID-n62w-34wv-rbdn
3
vulnerability VCID-nz22-6jy1-x3bv
4
vulnerability VCID-r1tt-p7t8-ufgh
5
vulnerability VCID-rgdr-jxdc-hucn
6
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.2
1
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hqyw-2vt2-tfcn
1
vulnerability VCID-mshr-yc9h-jufk
2
vulnerability VCID-n62w-34wv-rbdn
3
vulnerability VCID-nz22-6jy1-x3bv
4
vulnerability VCID-r1tt-p7t8-ufgh
5
vulnerability VCID-rgdr-jxdc-hucn
6
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.2
Affected_packages
0
url pkg:npm/%40openzeppelin/contracts@4.3.0
purl pkg:npm/%40openzeppelin/contracts@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-jwma-7k4s-5kgx
6
vulnerability VCID-khsw-qwwk-cbhe
7
vulnerability VCID-mshr-yc9h-jufk
8
vulnerability VCID-n62w-34wv-rbdn
9
vulnerability VCID-nkwc-fgjc-kqbt
10
vulnerability VCID-nz22-6jy1-x3bv
11
vulnerability VCID-pah6-6268-63ap
12
vulnerability VCID-qt6w-nqmu-57by
13
vulnerability VCID-r1tt-p7t8-ufgh
14
vulnerability VCID-snry-t5m2-c3hn
15
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.0
1
url pkg:npm/%40openzeppelin/contracts@4.3.1
purl pkg:npm/%40openzeppelin/contracts@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-jwma-7k4s-5kgx
6
vulnerability VCID-khsw-qwwk-cbhe
7
vulnerability VCID-mshr-yc9h-jufk
8
vulnerability VCID-n62w-34wv-rbdn
9
vulnerability VCID-nz22-6jy1-x3bv
10
vulnerability VCID-pah6-6268-63ap
11
vulnerability VCID-qt6w-nqmu-57by
12
vulnerability VCID-r1tt-p7t8-ufgh
13
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.1
2
url pkg:npm/%40openzeppelin/contracts@4.3.2
purl pkg:npm/%40openzeppelin/contracts@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-pah6-6268-63ap
10
vulnerability VCID-qt6w-nqmu-57by
11
vulnerability VCID-r1tt-p7t8-ufgh
12
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.2
3
url pkg:npm/%40openzeppelin/contracts@4.3.3
purl pkg:npm/%40openzeppelin/contracts@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.3
4
url pkg:npm/%40openzeppelin/contracts@4.4.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.4.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0-rc.0
5
url pkg:npm/%40openzeppelin/contracts@4.4.0-rc.1
purl pkg:npm/%40openzeppelin/contracts@4.4.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0-rc.1
6
url pkg:npm/%40openzeppelin/contracts@4.4.0
purl pkg:npm/%40openzeppelin/contracts@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0
7
url pkg:npm/%40openzeppelin/contracts@4.4.1
purl pkg:npm/%40openzeppelin/contracts@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.1
8
url pkg:npm/%40openzeppelin/contracts@4.4.2
purl pkg:npm/%40openzeppelin/contracts@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.2
9
url pkg:npm/%40openzeppelin/contracts@4.5.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.5.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.5.0-rc.0
10
url pkg:npm/%40openzeppelin/contracts@4.5.0
purl pkg:npm/%40openzeppelin/contracts@4.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.5.0
11
url pkg:npm/%40openzeppelin/contracts@4.6.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.6.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.6.0-rc.0
12
url pkg:npm/%40openzeppelin/contracts@4.6.0
purl pkg:npm/%40openzeppelin/contracts@4.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.6.0
13
url pkg:npm/%40openzeppelin/contracts@4.7.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.7.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.0-rc.0
14
url pkg:npm/%40openzeppelin/contracts@4.7.0
purl pkg:npm/%40openzeppelin/contracts@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-rgdr-jxdc-hucn
11
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.0
15
url pkg:npm/%40openzeppelin/contracts@4.7.1
purl pkg:npm/%40openzeppelin/contracts@4.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-hqyw-2vt2-tfcn
2
vulnerability VCID-khsw-qwwk-cbhe
3
vulnerability VCID-mshr-yc9h-jufk
4
vulnerability VCID-n62w-34wv-rbdn
5
vulnerability VCID-nz22-6jy1-x3bv
6
vulnerability VCID-pxxa-n32x-4bcj
7
vulnerability VCID-r1tt-p7t8-ufgh
8
vulnerability VCID-rgdr-jxdc-hucn
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.1
16
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nkwc-fgjc-kqbt
9
vulnerability VCID-nz22-6jy1-x3bv
10
vulnerability VCID-pah6-6268-63ap
11
vulnerability VCID-qt6w-nqmu-57by
12
vulnerability VCID-r1tt-p7t8-ufgh
13
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.0
17
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-pah6-6268-63ap
10
vulnerability VCID-qt6w-nqmu-57by
11
vulnerability VCID-r1tt-p7t8-ufgh
12
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.1
18
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.2
19
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.3
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.3
20
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0-rc.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.0-rc.1
21
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.0
22
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.1
23
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.2
24
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.0-rc.0
25
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.0
26
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.1
27
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.2
28
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.6.0-rc.0
29
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.6.0
30
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.0-rc.0
31
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-rgdr-jxdc-hucn
11
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.0
32
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-hqyw-2vt2-tfcn
2
vulnerability VCID-khsw-qwwk-cbhe
3
vulnerability VCID-mshr-yc9h-jufk
4
vulnerability VCID-n62w-34wv-rbdn
5
vulnerability VCID-nz22-6jy1-x3bv
6
vulnerability VCID-pxxa-n32x-4bcj
7
vulnerability VCID-r1tt-p7t8-ufgh
8
vulnerability VCID-rgdr-jxdc-hucn
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31198
reference_id
reference_type
scores
0
value 0.00266
scoring_system epss
scoring_elements 0.50375
published_at 2026-06-07T12:55:00Z
1
value 0.00266
scoring_system epss
scoring_elements 0.50394
published_at 2026-06-06T12:55:00Z
2
value 0.00266
scoring_system epss
scoring_elements 0.50386
published_at 2026-06-05T12:55:00Z
3
value 0.00266
scoring_system epss
scoring_elements 0.50346
published_at 2026-06-08T12:55:00Z
4
value 0.00266
scoring_system epss
scoring_elements 0.50325
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31198
1
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/OpenZeppelin/openzeppelin-contracts
2
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:52:48Z/
url https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561
3
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2
4
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-xrc4-737v-9q75
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:52:48Z/
url https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-xrc4-737v-9q75
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31198
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31198
6
reference_url https://github.com/advisories/GHSA-xrc4-737v-9q75
reference_id GHSA-xrc4-737v-9q75
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xrc4-737v-9q75
Weaknesses
0
cwe_id 682
name Incorrect Calculation
description The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9pnw-9buy-5kab