https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T09:25:18.188876+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233845 EUVD-2026-233845 2026-10-19T09:25:18.192530+00:00 EUVD-2026-233845 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35915 fkie_cve-2022-35915 2026-10-19T09:25:18.192578+00:00

OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has been fixed in v4.7.2. Users are advised to upgrade. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-7grf-83vw-6f5x GHSA-7grf-83vw-6f5x — OpenZeppelin Contracts ERC165Checker unbounded gas consumption 2026-10-19T09:25:18.192624+00:00

Affected: npm: @openzeppelin/contracts, npm: openzeppelin-solidity, npm: @openzeppelin/contracts-upgradeable, npm: openzeppelin-eth

### Impact

The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost.

### Patches

The issue has been fixed in v4.7.2.

### References

https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3587

### For more information

If you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).

 https://cve.radiocsirt.org/vuln/gsd-2022-35915 gsd-2022-35915 2026-10-19T09:25:18.192681+00:00 gsd-2022-35915