Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-qt6w-nqmu-57by
Summary
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
### Impact

`SignatureChecker.isValidSignatureNow` is not expected to revert. However, an incorrect assumption about Solidity 0.8's `abi.decode` allows some cases to revert, given a target contract that doesn't implement EIP-1271 as expected.

The contracts that may be affected are those that use `SignatureChecker` to check the validity of a signature and handle invalid signatures in a way other than reverting. We believe this to be unlikely.

### Patches

The issue was patched in 4.7.1.

### References

https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552

### For more information

If you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).
Aliases
0
alias CVE-2022-31172
1
alias GHSA-4g63-c64m-25w9
Fixed_packages
0
url pkg:npm/%40openzeppelin/contracts@4.7.1
purl pkg:npm/%40openzeppelin/contracts@4.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-hqyw-2vt2-tfcn
2
vulnerability VCID-khsw-qwwk-cbhe
3
vulnerability VCID-mshr-yc9h-jufk
4
vulnerability VCID-n62w-34wv-rbdn
5
vulnerability VCID-nz22-6jy1-x3bv
6
vulnerability VCID-pxxa-n32x-4bcj
7
vulnerability VCID-r1tt-p7t8-ufgh
8
vulnerability VCID-rgdr-jxdc-hucn
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.1
1
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-hqyw-2vt2-tfcn
2
vulnerability VCID-khsw-qwwk-cbhe
3
vulnerability VCID-mshr-yc9h-jufk
4
vulnerability VCID-n62w-34wv-rbdn
5
vulnerability VCID-nz22-6jy1-x3bv
6
vulnerability VCID-pxxa-n32x-4bcj
7
vulnerability VCID-r1tt-p7t8-ufgh
8
vulnerability VCID-rgdr-jxdc-hucn
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.1
Affected_packages
0
url pkg:npm/%40openzeppelin/contracts@4.1.0
purl pkg:npm/%40openzeppelin/contracts@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a5j2-t27s-afgq
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-jwma-7k4s-5kgx
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-snry-t5m2-c3hn
10
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.1.0
1
url pkg:npm/%40openzeppelin/contracts@4.2.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.2.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a5j2-t27s-afgq
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-jwma-7k4s-5kgx
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-snry-t5m2-c3hn
10
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.2.0-rc.0
2
url pkg:npm/%40openzeppelin/contracts@4.2.0
purl pkg:npm/%40openzeppelin/contracts@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a5j2-t27s-afgq
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-jwma-7k4s-5kgx
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-snry-t5m2-c3hn
11
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.2.0
3
url pkg:npm/%40openzeppelin/contracts@4.3.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.3.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a5j2-t27s-afgq
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-jwma-7k4s-5kgx
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-snry-t5m2-c3hn
11
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.0-rc.0
4
url pkg:npm/%40openzeppelin/contracts@4.3.0
purl pkg:npm/%40openzeppelin/contracts@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-jwma-7k4s-5kgx
6
vulnerability VCID-khsw-qwwk-cbhe
7
vulnerability VCID-mshr-yc9h-jufk
8
vulnerability VCID-n62w-34wv-rbdn
9
vulnerability VCID-nkwc-fgjc-kqbt
10
vulnerability VCID-nz22-6jy1-x3bv
11
vulnerability VCID-pah6-6268-63ap
12
vulnerability VCID-qt6w-nqmu-57by
13
vulnerability VCID-r1tt-p7t8-ufgh
14
vulnerability VCID-snry-t5m2-c3hn
15
vulnerability VCID-xpnm-mbrk-mugy
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.0
5
url pkg:npm/%40openzeppelin/contracts@4.3.1
purl pkg:npm/%40openzeppelin/contracts@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-jwma-7k4s-5kgx
6
vulnerability VCID-khsw-qwwk-cbhe
7
vulnerability VCID-mshr-yc9h-jufk
8
vulnerability VCID-n62w-34wv-rbdn
9
vulnerability VCID-nz22-6jy1-x3bv
10
vulnerability VCID-pah6-6268-63ap
11
vulnerability VCID-qt6w-nqmu-57by
12
vulnerability VCID-r1tt-p7t8-ufgh
13
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.1
6
url pkg:npm/%40openzeppelin/contracts@4.3.2
purl pkg:npm/%40openzeppelin/contracts@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-pah6-6268-63ap
10
vulnerability VCID-qt6w-nqmu-57by
11
vulnerability VCID-r1tt-p7t8-ufgh
12
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.2
7
url pkg:npm/%40openzeppelin/contracts@4.3.3
purl pkg:npm/%40openzeppelin/contracts@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.3.3
8
url pkg:npm/%40openzeppelin/contracts@4.4.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.4.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0-rc.0
9
url pkg:npm/%40openzeppelin/contracts@4.4.0-rc.1
purl pkg:npm/%40openzeppelin/contracts@4.4.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0-rc.1
10
url pkg:npm/%40openzeppelin/contracts@4.4.0
purl pkg:npm/%40openzeppelin/contracts@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-jwma-7k4s-5kgx
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
11
vulnerability VCID-snry-t5m2-c3hn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.0
11
url pkg:npm/%40openzeppelin/contracts@4.4.1
purl pkg:npm/%40openzeppelin/contracts@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.1
12
url pkg:npm/%40openzeppelin/contracts@4.4.2
purl pkg:npm/%40openzeppelin/contracts@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.4.2
13
url pkg:npm/%40openzeppelin/contracts@4.5.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.5.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.5.0-rc.0
14
url pkg:npm/%40openzeppelin/contracts@4.5.0
purl pkg:npm/%40openzeppelin/contracts@4.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.5.0
15
url pkg:npm/%40openzeppelin/contracts@4.6.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.6.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.6.0-rc.0
16
url pkg:npm/%40openzeppelin/contracts@4.6.0
purl pkg:npm/%40openzeppelin/contracts@4.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.6.0
17
url pkg:npm/%40openzeppelin/contracts@4.7.0-rc.0
purl pkg:npm/%40openzeppelin/contracts@4.7.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.0-rc.0
18
url pkg:npm/%40openzeppelin/contracts@4.7.0
purl pkg:npm/%40openzeppelin/contracts@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-rgdr-jxdc-hucn
11
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts@4.7.0
19
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.1.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4c19-crxp-93fh
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.1.0
20
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.2.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4c19-crxp-93fh
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.2.0
21
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4c19-crxp-93fh
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nkwc-fgjc-kqbt
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.0-rc.0
22
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nkwc-fgjc-kqbt
9
vulnerability VCID-nz22-6jy1-x3bv
10
vulnerability VCID-pah6-6268-63ap
11
vulnerability VCID-qt6w-nqmu-57by
12
vulnerability VCID-r1tt-p7t8-ufgh
13
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.0
23
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-a5j2-t27s-afgq
2
vulnerability VCID-dd7x-jkkf-gygv
3
vulnerability VCID-e2yb-zuf8-6qbk
4
vulnerability VCID-hqyw-2vt2-tfcn
5
vulnerability VCID-khsw-qwwk-cbhe
6
vulnerability VCID-mshr-yc9h-jufk
7
vulnerability VCID-n62w-34wv-rbdn
8
vulnerability VCID-nz22-6jy1-x3bv
9
vulnerability VCID-pah6-6268-63ap
10
vulnerability VCID-qt6w-nqmu-57by
11
vulnerability VCID-r1tt-p7t8-ufgh
12
vulnerability VCID-u3xc-5csn-r3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.1
24
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-pah6-6268-63ap
9
vulnerability VCID-qt6w-nqmu-57by
10
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.2
25
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.3
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.3.3
26
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0-rc.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.0-rc.1
27
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.0
28
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-e2yb-zuf8-6qbk
3
vulnerability VCID-hqyw-2vt2-tfcn
4
vulnerability VCID-khsw-qwwk-cbhe
5
vulnerability VCID-mshr-yc9h-jufk
6
vulnerability VCID-n62w-34wv-rbdn
7
vulnerability VCID-nz22-6jy1-x3bv
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.1
29
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.4.2
30
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.0-rc.0
31
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.0
32
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.1
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.1
33
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.2
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.5.2
34
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-qt6w-nqmu-57by
8
vulnerability VCID-r1tt-p7t8-ufgh
9
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.6.0-rc.0
35
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.6.0
36
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0-rc.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.0-rc.0
37
url pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0
purl pkg:npm/%40openzeppelin/contracts-upgradeable@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9pnw-9buy-5kab
1
vulnerability VCID-dd7x-jkkf-gygv
2
vulnerability VCID-hqyw-2vt2-tfcn
3
vulnerability VCID-khsw-qwwk-cbhe
4
vulnerability VCID-mshr-yc9h-jufk
5
vulnerability VCID-n62w-34wv-rbdn
6
vulnerability VCID-nz22-6jy1-x3bv
7
vulnerability VCID-pxxa-n32x-4bcj
8
vulnerability VCID-qt6w-nqmu-57by
9
vulnerability VCID-r1tt-p7t8-ufgh
10
vulnerability VCID-rgdr-jxdc-hucn
11
vulnerability VCID-wvaj-hpg7-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540openzeppelin/contracts-upgradeable@4.7.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31172
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38726
published_at 2026-06-06T12:55:00Z
1
value 0.00175
scoring_system epss
scoring_elements 0.38633
published_at 2026-06-04T12:55:00Z
2
value 0.00175
scoring_system epss
scoring_elements 0.38722
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31172
1
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:53:13Z/
url https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552
2
reference_url https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4g63-c64m-25w9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:53:13Z/
url https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4g63-c64m-25w9
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31172
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31172
4
reference_url https://github.com/advisories/GHSA-4g63-c64m-25w9
reference_id GHSA-4g63-c64m-25w9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4g63-c64m-25w9
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 347
name Improper Verification of Cryptographic Signature
description The product does not verify, or incorrectly verifies, the cryptographic signature for data.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-qt6w-nqmu-57by