https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 19:37:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233869 EUVD-2026-233869 https://cve.radiocsirt.org/vuln/euvd-2026-233869 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31170 <p>OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165Checker reverting instead of returning `false`. `ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-165 as expected, specifically if it returns a value other than 0 or 1. The contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting. The issue was patched in version 4.7.1.</p> <p>OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165Checker reverting instead of returning `false`. `ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-165 as expected, specifically if it returns a value other than 0 or 1. The contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting. The issue was patched in version 4.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31170 https://cve.radiocsirt.org/vuln/ghsa-qh9x-gcfh-pcrw <p><strong>Affected:</strong> npm: @openzeppelin/contracts, npm: @openzeppelin/contracts-upgradeable</p> <p>### Impact</p> <p>`ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-165 as expected, specifically if it returns a value other than 0 or 1.</p> <p>The contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting.</p> <p>### Patches</p> <p>The issue was patched in 4.7.1.</p> <p>### References</p> <p>https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).</p> <p><strong>Affected:</strong> npm: @openzeppelin/contracts, npm: @openzeppelin/contracts-upgradeable</p> <p>### Impact</p> <p>`ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-165 as expected, specifically if it returns a value other than 0 or 1.</p> <p>The contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting.</p> <p>### Patches</p> <p>The issue was patched in 4.7.1.</p> <p>### References</p> <p>https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).</p> https://cve.radiocsirt.org/vuln/ghsa-qh9x-gcfh-pcrw https://cve.radiocsirt.org/vuln/gsd-2022-31170 gsd-2022-31170 https://cve.radiocsirt.org/vuln/gsd-2022-31170