https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 13:45:57 +0000 https://cve.radiocsirt.org/vuln/cve-2022-31172 <p><strong>Affected:</strong> openzeppelin-contracts</p> <p>OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. `SignatureChecker.isValidSignatureNow` is not expected to revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-1271 as expected. The contracts that may be affected are those that use `SignatureChecker` to check the validity of a signature and handle invalid signatures in a way other than reverting. The issue was patched in version 4.7.1.</p> <p><strong>Affected:</strong> openzeppelin-contracts</p> <p>OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. `SignatureChecker.isValidSignatureNow` is not expected to revert. However, an incorrect assumption about Solidity 0.8&#39;s `abi.decode` allows some cases to revert, given a target contract that doesn&#39;t implement EIP-1271 as expected. The contracts that may be affected are those that use `SignatureChecker` to check the validity of a signature and handle invalid signatures in a way other than reverting. The issue was patched in version 4.7.1.</p> https://cve.radiocsirt.org/vuln/cve-2022-31172