{"id":1106643,"name":"@openzeppelin/contracts","ecosystem":"npm","description":"Secure Smart Contract library for Solidity","homepage":"https://openzeppelin.com/contracts/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","keywords_array":["solidity","ethereum","smart","contracts","security","zeppelin"],"namespace":"openzeppelin","versions_count":100,"first_release_published_at":"2019-07-26T19:34:41.536Z","latest_release_published_at":"2025-10-31T14:43:58.988Z","latest_release_number":"5.5.0","last_synced_at":"2026-03-18T14:08:04.430Z","created_at":"2022-04-08T10:56:43.670Z","updated_at":"2026-06-19T03:14:02.097Z","registry_url":"https://www.npmjs.com/package/@openzeppelin/contracts","install_command":"npm install @openzeppelin/contracts","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"5.4.0","dev":"5.5.0","next":"5.6.0-rc.1"}},"repo_metadata":{"id":37285011,"uuid":"64700934","full_name":"OpenZeppelin/openzeppelin-contracts","owner":"OpenZeppelin","description":"OpenZeppelin Contracts is a library for secure smart contract development.","archived":false,"fork":false,"pushed_at":"2024-05-28T08:50:34.000Z","size":45431,"stargazers_count":24271,"open_issues_count":242,"forks_count":11648,"subscribers_count":641,"default_branch":"master","last_synced_at":"2024-05-28T15:51:23.381Z","etag":null,"topics":["ethereum","evm","security","smart-contracts","solidity"],"latest_commit_sha":null,"homepage":"https://openzeppelin.com/contracts","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/OpenZeppelin.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":"audits/2017-03.md","citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-08-01T20:54:54.000Z","updated_at":"2024-05-30T17:40:33.816Z","dependencies_parsed_at":"2023-10-13T02:39:44.038Z","dependency_job_id":"2e4ce127-be40-4453-bb72-eb243507d538","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","commit_stats":{"total_commits":3078,"total_committers":426,"mean_commits":7.225352112676056,"dds":0.7975958414554906,"last_synced_commit":"7c8b7a27284f503ce8ae23d63ac9403096dcf6fe"},"previous_names":["openzeppelin/zeppelin-solidity","openzeppelin/openzeppelin-solidity"],"tags_count":134,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OpenZeppelin","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":217597530,"owners_count":16201783,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"OpenZeppelin","name":"OpenZeppelin","uuid":"20820676","kind":"organization","description":"The standard for secure blockchain applications","email":"contact@openzeppelin.com","website":"https://openzeppelin.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/20820676?v=4","repositories_count":86,"last_synced_at":"2023-04-09T18:33:46.375Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/OpenZeppelin","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:28:40.791Z","updated_at":"2023-04-09T18:33:46.717Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OpenZeppelin","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OpenZeppelin/repositories"},"tags":[{"name":"v4.9.6","sha":"dc44c9f1a4c3b10af99492eed84f83ed244203f6","kind":"commit","published_at":"2024-02-29T17:04:26.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.6","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.6/manifests"},{"name":"v5.0.2","sha":"dbb6104ce834628e473d2173bbc9d47f81a9eec3","kind":"commit","published_at":"2024-02-29T16:44:22.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.2/manifests"},{"name":"v4.9.4","sha":"0d5f54e69b2a2058bc98651a2e200f558c84a953","kind":"commit","published_at":"2023-12-07T21:52:26.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.4","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.4/manifests"},{"name":"v4.9.5","sha":"3af62716dded52b323c688da0721099a420adfb8","kind":"commit","published_at":"2023-12-07T18:37:52.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.5","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.5/manifests"},{"name":"v5.0.1","sha":"cffb2f1ddcd87efd68effc92cfd336c5145acabd","kind":"commit","published_at":"2023-12-04T19:00:00.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"932fddf69a699a9a80fd2396fd1a2ab91cdda123","kind":"tag","published_at":"2023-10-05T18:02:19.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0/manifests"},{"name":"v5.0.0-rc.2","sha":"a14d8149ede8284e92bbac833fa07e6028eaa44c","kind":"tag","published_at":"2023-10-02T20:31:43.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.2/manifests"},{"name":"v5.0.0-rc.1","sha":"bc96591f65c1e60d6aecbde3057d51bfc8189c8d","kind":"tag","published_at":"2023-09-28T23:44:33.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.1/manifests"},{"name":"v5.0.0-rc.0","sha":"b55b47d42165936876a26279581181757ca9505f","kind":"tag","published_at":"2023-09-19T15:44:42.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v5.0.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v5.0.0-rc.0/manifests"},{"name":"v4.9.3","sha":"fd81a96f01cc42ef1c9a5399364968d0e07e9e90","kind":"tag","published_at":"2023-07-28T21:17:07.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.3/manifests"},{"name":"v4.9.2","sha":"e50c24f5839db17f46991478384bfda14acfb830","kind":"tag","published_at":"2023-06-16T20:51:45.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.2/manifests"},{"name":"v4.9.1","sha":"281550b71c3df9a83e6b80ceefc700852c287570","kind":"tag","published_at":"2023-06-07T01:43:57.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.1/manifests"},{"name":"v4.9.0","sha":"54b3f14346da01ba0d159114b399197fea8b7cda","kind":"tag","published_at":"2023-06-07T01:10:35.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0/manifests"},{"name":"v4.9.0-rc.1","sha":"4f7047ceecfadd5e3132182ea54a2616f732d667","kind":"tag","published_at":"2023-06-07T01:09:52.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0-rc.1/manifests"},{"name":"v4.9.0-rc.0","sha":"17cf519425411a443f1b0c24c8eb22ef48542c68","kind":"tag","published_at":"2023-05-09T20:38:42.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.9.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.9.0-rc.0/manifests"},{"name":"v4.8.3","sha":"0a25c1940ca220686588c4af3ec526f725fe2582","kind":"tag","published_at":"2023-04-13T20:18:25.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.3/manifests"},{"name":"v4.8.2","sha":"d00acef4059807535af0bd0dd0ddf619747a044b","kind":"tag","published_at":"2023-03-02T23:03:13.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.2/manifests"},{"name":"v4.8.1","sha":"0457042d93d9dfd760dbaa06a4d2f1216fdbe297","kind":"tag","published_at":"2023-01-13T18:34:07.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.1/manifests"},{"name":"v4.8.0","sha":"49c0e4370d0cc50ea6090709e3835a3091e33ee2","kind":"tag","published_at":"2022-11-08T14:29:29.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0/manifests"},{"name":"v4.8.0-rc.2","sha":"1f18fea1de4c69355c773090c40fe083c08947b4","kind":"tag","published_at":"2022-10-17T16:53:40.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.2/manifests"},{"name":"v4.8.0-rc.1","sha":"16791134c10d3f9c576400a8202072a91cf14f65","kind":"tag","published_at":"2022-09-23T16:59:30.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.1/manifests"},{"name":"v4.8.0-rc.0","sha":"5e6fd491f3ac4cccd1d7a4d360fb31eceff0ed12","kind":"tag","published_at":"2022-09-07T21:08:32.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.8.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.8.0-rc.0/manifests"},{"name":"v4.7.3","sha":"ecd2ca2cd7cac116f7a37d0e474bbb3d7d5e1c4d","kind":"tag","published_at":"2022-08-10T18:48:57.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.7.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.3/manifests"},{"name":"v4.7.2","sha":"64e48203cecad94f02de9891ecdeed4d629c6dae","kind":"tag","published_at":"2022-07-27T19:54:01.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.7.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.2/manifests"},{"name":"v4.7.1","sha":"3b8b4ba82c880c31cd3b96dd5e15741d7e26658e","kind":"tag","published_at":"2022-07-19T21:36:15.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.7.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.1/manifests"},{"name":"v4.7.0","sha":"8c49ad74eae76ee389d038780d407cf90b4ae1de","kind":"tag","published_at":"2022-06-29T09:00:17.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.7.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.0/manifests"},{"name":"v4.7.0-rc.0","sha":"fac4326b5ab91fac83ee2dad569ceb7d82f1eb32","kind":"tag","published_at":"2022-06-07T22:12:17.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.7.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.7.0-rc.0/manifests"},{"name":"v4.6.0","sha":"d4fb3a89f9d0a39c7ee6f2601d33ffbf30085322","kind":"commit","published_at":"2022-04-26T16:49:53.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.6.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.6.0/manifests"},{"name":"v4.6.0-rc.0","sha":"3a2534d66b709ed5f4f9351110bdb6344e17f6af","kind":"tag","published_at":"2022-03-31T01:30:36.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.6.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.6.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.6.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.6.0-rc.0/manifests"},{"name":"v4.5.2","sha":"1e5e9b0fec1248cff2131425655ead33483f5164","kind":"tag","published_at":"2022-03-02T20:05:37.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.5.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.2/manifests"},{"name":"v4.5.1","sha":"0d96e3df453dab07e63a210d72cd22d886a1b035","kind":"tag","published_at":"2022-02-11T16:15:46.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.5.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.1/manifests"},{"name":"v4.5.0","sha":"a5445b0afb8b350417b6e6ab3160554967bc151f","kind":"tag","published_at":"2022-02-09T19:05:24.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.5.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.0/manifests"},{"name":"v4.5.0-rc.0","sha":"d1f67bd803ca0e5f2cd31d170c788bf90cfb9dfd","kind":"tag","published_at":"2022-01-13T23:10:47.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.5.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.5.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.5.0-rc.0/manifests"},{"name":"v4.4.2","sha":"b53c43242fc9c0e435b66178c3847c4a1b417cc1","kind":"tag","published_at":"2022-01-11T19:52:27.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.4.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.2/manifests"},{"name":"v4.4.1","sha":"6bd6b76d1156e20e45d1016f355d154141c7e5b9","kind":"tag","published_at":"2021-12-14T16:14:39.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.4.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.1/manifests"},{"name":"v4.4.0","sha":"4961a51cc736c7d4aa9bd2e11e4cbbaff73efee9","kind":"tag","published_at":"2021-11-25T19:35:37.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.4.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0/manifests"},{"name":"v4.4.0-rc.1","sha":"65ef662a2ba263b62de0f45b062c8942362ba8c8","kind":"tag","published_at":"2021-11-16T13:23:53.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.4.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0-rc.1/manifests"},{"name":"v4.3.3","sha":"8d7a871609117b2d95074f5f5e92e4c0506584b7","kind":"tag","published_at":"2021-11-11T16:04:38.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.3.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.3/manifests"},{"name":"v4.4.0-rc.0","sha":"0a87a4e75b02b95ca019d4894dc6e02e69e586f1","kind":"tag","published_at":"2021-10-20T20:21:04.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.4.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.4.0-rc.0/manifests"},{"name":"v4.3.2","sha":"0c4de6721d9668d7b5b2c5a9400fd0b2a5e8de90","kind":"tag","published_at":"2021-09-14T21:06:39.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.3.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.2/manifests"},{"name":"v3.4.2-solc-0.7","sha":"04695aecbd4d17dddfd55de766d10e3805d6f42f","kind":"tag","published_at":"2021-08-26T21:05:57.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.2-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.2-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.2-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.2-solc-0.7/manifests"},{"name":"v4.3.1","sha":"6edb6dd1ca43d05a762d84c688116b3327f5e490","kind":"tag","published_at":"2021-08-26T20:59:03.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.3.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.1/manifests"},{"name":"v3.4.2","sha":"8e0296096449d9b1cd7c5631e917330635244c37","kind":"tag","published_at":"2021-08-26T20:54:06.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.2/manifests"},{"name":"v4.3.0","sha":"1d2e15fbd7314f4f60b47d97d9b852aacd5404f7","kind":"tag","published_at":"2021-08-17T15:35:02.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.3.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.0/manifests"},{"name":"v4.3.0-rc.0","sha":"635e36ff08f4e89ef17d2239196dfa617af0c98e","kind":"tag","published_at":"2021-08-06T14:08:58.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.3.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.3.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.3.0-rc.0/manifests"},{"name":"v4.2.0","sha":"9fbc1d71c0ed4c68a0bc160c69df1f85e94d2d8e","kind":"tag","published_at":"2021-06-30T17:29:37.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.2.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.2.0/manifests"},{"name":"v4.2.0-rc.0","sha":"556e366ce52358f1a4d51066ea7dd3694552f2af","kind":"tag","published_at":"2021-06-23T12:54:29.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.2.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.2.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.2.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.2.0-rc.0/manifests"},{"name":"v4.1.0","sha":"23869e5b2a7c6b9c3e27dee4289615b8cf50e36b","kind":"tag","published_at":"2021-04-29T21:04:21.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.1.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.1.0/manifests"},{"name":"v3.4.1-solc-0.7","sha":"5b42f7aee64563b23f8cad9ccacb14f089dd1010","kind":"tag","published_at":"2021-04-20T18:11:49.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.1-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.1-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1-solc-0.7/manifests"},{"name":"v3.4.1-solc-0.7-2","sha":"1c3d6c97f7469721b9c683706c88558d544fc0da","kind":"tag","published_at":"2021-04-20T18:11:08.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.1-solc-0.7-2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.1-solc-0.7-2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1-solc-0.7-2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1-solc-0.7-2/manifests"},{"name":"v4.1.0-rc.0","sha":"ad90dbdaff982ecd557b1a16284d1df6f3f5a8a9","kind":"tag","published_at":"2021-04-16T16:14:24.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.1.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.1.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.1.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.1.0-rc.0/manifests"},{"name":"v4.0.0","sha":"a673994de5eba4305cefb8ae98ea9ad37a43efaa","kind":"tag","published_at":"2021-03-23T15:06:54.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.0.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0/manifests"},{"name":"v4.0.0-rc.0","sha":"1ee939e7c4b2c1fe84e6f5b6a7c1ce5e7d91667f","kind":"tag","published_at":"2021-03-09T14:38:49.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.0.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.0.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-rc.0/manifests"},{"name":"v3.4.1","sha":"cec0800c541c809f883a37f2dfb91ec4c90263c5","kind":"tag","published_at":"2021-03-03T19:54:40.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.1/manifests"},{"name":"v4.0.0-beta.1","sha":"954f6110d6e66d0c020aa5721dc49b07eb576d06","kind":"tag","published_at":"2021-03-03T15:23:38.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.0.0-beta.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-beta.1/manifests"},{"name":"v4.0.0-beta.0","sha":"556cdf5f1ac86912c6a90535dd8a6c904311ec67","kind":"tag","published_at":"2021-02-22T20:44:21.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v4.0.0-beta.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.0.0-beta.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-beta.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v4.0.0-beta.0/manifests"},{"name":"v3.4.0-solc-0.7","sha":"5c8746f56b4bed8cc9e0e044f5f69ab2f9428ce1","kind":"tag","published_at":"2021-02-02T20:06:27.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.0-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.0-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0-solc-0.7/manifests"},{"name":"v3.4.0","sha":"fa64a1ced0b70ab89073d5d0b6e01b0778f7e7d6","kind":"tag","published_at":"2021-02-02T19:15:12.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0/manifests"},{"name":"v3.4.0-rc.0","sha":"ff300b10e1c659ac4b5690e00e7a4f883dc0b430","kind":"tag","published_at":"2021-01-26T16:31:55.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.4.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.4.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.4.0-rc.0/manifests"},{"name":"v3.3.0-solc-0.7","sha":"40a15c04066d9356eb3665a3c1639f4fcfd2c764","kind":"tag","published_at":"2020-11-27T15:49:55.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.3.0-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.3.0-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-solc-0.7/manifests"},{"name":"v3.3.0","sha":"6be5ffe54fc8982b7c1d0f45d4cb7bbd313107cd","kind":"tag","published_at":"2020-11-26T23:43:43.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.3.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0/manifests"},{"name":"v3.3.0-rc.2","sha":"1fccf6fa53aa811c591b02dc4c5b07db2aa054b6","kind":"tag","published_at":"2020-11-24T21:51:47.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.3.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.3.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.2/manifests"},{"name":"v3.3.0-rc.1","sha":"c67d81bae18f977790ee3b4af6de5cd7952930a2","kind":"tag","published_at":"2020-11-18T00:39:45.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.3.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.3.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.1/manifests"},{"name":"v3.3.0-rc.0","sha":"25ac33486c4b6d7cc321ef3a26950a98c11157fb","kind":"tag","published_at":"2020-11-17T21:58:48.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.3.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.3.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.3.0-rc.0/manifests"},{"name":"v3.2.2-solc-0.7","sha":"b6b1c0130b6a9c46b0228a57609909293eb16c47","kind":"tag","published_at":"2020-10-28T19:33:23.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.2.2-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.2.2-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.2-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.2-solc-0.7/manifests"},{"name":"v3.2.1-solc-0.7","sha":"ec8efd52b4b802042c151e1e7b8be2785ab7cd37","kind":"tag","published_at":"2020-09-15T21:17:10.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.2.1-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.2.1-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.1-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.1-solc-0.7/manifests"},{"name":"v3.2.0","sha":"1ada3b633e5bfd9d4ffe0207d64773a11f5a7c40","kind":"tag","published_at":"2020-09-10T23:10:42.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.2.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.0/manifests"},{"name":"v3.2.0-rc.0","sha":"f2fb8cf23b5f2b868f986ad91369e5004842c274","kind":"tag","published_at":"2020-09-03T19:26:55.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.2.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.2.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.2.0-rc.0/manifests"},{"name":"v3.1.0-solc-0.7","sha":"2acb1abb1fa81c66456717299e1cc2997fa099d9","kind":"tag","published_at":"2020-07-30T20:04:50.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.1.0-solc-0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.1.0-solc-0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0-solc-0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0-solc-0.7/manifests"},{"name":"v3.1.0","sha":"de99bccbfd4ecd19d7369d01b070aa72c64423c9","kind":"tag","published_at":"2020-06-23T19:09:01.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.1.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0/manifests"},{"name":"v3.1.0-rc.0","sha":"8c1daaab57fdd390b2a7d89aa41e9a783068ee61","kind":"tag","published_at":"2020-06-11T19:53:20.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.1.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.1.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.1.0-rc.0/manifests"},{"name":"v3.0.2","sha":"5294f3b9b7f9b971db1ac53a127427621815cde4","kind":"tag","published_at":"2020-06-08T16:09:47.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.2/manifests"},{"name":"v3.0.1","sha":"087d314daf9c7d8205e9eeaade287d853bb3350d","kind":"tag","published_at":"2020-04-27T18:30:27.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.1/manifests"},{"name":"v2.5.1","sha":"837828967a9831e4333d5fb9edefb200a357d24d","kind":"tag","published_at":"2020-04-24T18:57:33.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.5.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.1/manifests"},{"name":"v3.0.0","sha":"b7452960bed44db4bbd0da2101af37c7525d8369","kind":"tag","published_at":"2020-04-20T23:37:38.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"63a3665a171acb1db8c16914f6b57124461b94ae","kind":"tag","published_at":"2020-04-03T19:22:56.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-rc.1/manifests"},{"name":"v3.0.0-rc.0","sha":"a3c6e5f088c50a15b588f13d94bae27cbe3e5629","kind":"tag","published_at":"2020-03-16T23:47:28.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-rc.0/manifests"},{"name":"v3.0.0-beta.0","sha":"9188faa2fa2ac680881775b6226cb2d64180a5c4","kind":"tag","published_at":"2020-02-14T16:45:11.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v3.0.0-beta.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v3.0.0-beta.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-beta.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v3.0.0-beta.0/manifests"},{"name":"v2.5.0","sha":"58a3368215581509d05bd3ec4d53cd381c9bb40e","kind":"tag","published_at":"2020-02-04T22:39:24.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.5.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.0/manifests"},{"name":"v2.5.0-rc.0","sha":"e4a8a5533e8d3157ec398d2e5597cdd81410e4cc","kind":"tag","published_at":"2020-01-24T17:56:29.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.5.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.5.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.5.0-rc.0/manifests"},{"name":"v2.2.3","sha":"b11ffceb8d476e86b7a3024862e6c5e7b6e97cf3","kind":"tag","published_at":"2020-01-10T23:45:13.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.2.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.3/manifests"},{"name":"v2.4.0","sha":"cdf655f770cf8412fbd4d6aef3c55194a1233ef1","kind":"tag","published_at":"2019-10-29T20:44:30.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.4.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0/manifests"},{"name":"v2.4.0-beta.2","sha":"c77181c9762f6a418d89a4bde8c4bf7362c3fb30","kind":"tag","published_at":"2019-08-16T19:31:54.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.4.0-beta.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.4.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.2/manifests"},{"name":"v2.4.0-beta.1","sha":"3e33066ddea18b85345f22b18026343e4f15e7f7","kind":"tag","published_at":"2019-08-16T19:12:05.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.4.0-beta.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.4.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.1/manifests"},{"name":"v2.4.0-beta.0","sha":"588b8102560a8c63cf92a9c4fcec15a923282f1f","kind":"tag","published_at":"2019-08-15T16:50:55.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.4.0-beta.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.4.0-beta.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.4.0-beta.0/manifests"},{"name":"v2.2.2","sha":"4070719ff5fb54b6bec06af765b96a93a223a477","kind":"tag","published_at":"2019-08-12T21:59:37.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.2.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"41e79d788720841ecf97764c94d83f953b435a44","kind":"tag","published_at":"2019-07-22T15:22:17.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.2.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.1/manifests"},{"name":"v2.3.0","sha":"132e442c1f5c857d2929fc2d5c5f08a3274a1910","kind":"tag","published_at":"2019-05-27T15:17:20.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.3.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0/manifests"},{"name":"vtest","sha":"2a4c91cf49c2736dc09c1c03cf383911def1a1b2","kind":"tag","published_at":"2019-05-22T22:27:19.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/vtest","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/vtest","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/vtest","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/vtest/manifests"},{"name":"v2.3.0-rc.3","sha":"a289314426df78094cd326cca9f55339bc59c628","kind":"tag","published_at":"2019-05-16T19:09:19.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.3.0-rc.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.3.0-rc.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.3/manifests"},{"name":"v2.3.0-rc.2","sha":"74ef942bd1eb0e595150b5f74d462455c3d73008","kind":"tag","published_at":"2019-05-08T20:03:46.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.3.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.3.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.2/manifests"},{"name":"v2.3.0-rc.1","sha":"2d467268e5c4c75e5accb7b4697535c02497724f","kind":"tag","published_at":"2019-04-24T22:44:43.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.3.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.3.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.1/manifests"},{"name":"v2.3.0-rc.0","sha":"a3af8266db93c65f6e55b97ac18e3aa18636e426","kind":"tag","published_at":"2019-04-24T14:35:30.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.3.0-rc.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.3.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.3.0-rc.0/manifests"},{"name":"v2.2.0","sha":"9ed1b4486519113ee05fa648acb4ebcecd070cbf","kind":"tag","published_at":"2019-03-14T21:44:26.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.2.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.0/manifests"},{"name":"v2.2.0-rc.1","sha":"1e5295d3049d0daa79ce9a3462ce7f2f8e131c29","kind":"tag","published_at":"2019-03-07T15:52:25.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.2.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.2.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.2.0-rc.1/manifests"},{"name":"v2.0.1","sha":"5a64eb2e14e2cb307707c638283ad0a925909463","kind":"tag","published_at":"2019-02-26T19:41:05.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.1/manifests"},{"name":"v2.1.3","sha":"77d569d8fafe7f39d44386e0083bda26968e534c","kind":"tag","published_at":"2019-02-26T19:29:30.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.1.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8617c4b4c83fdf6b229c60e9f1c9be0dc5b961f5","kind":"tag","published_at":"2019-01-18T18:45:34.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.1.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"ae02103e47af2df8471bfd11bc171d5b53cd022c","kind":"tag","published_at":"2019-01-04T21:41:15.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.1.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.1/manifests"},{"name":"v2.1.0-rc.2","sha":"40f08a8c0b162dd296180366ef78273702e0ac43","kind":"tag","published_at":"2018-12-27T19:25:15.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.1.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.1.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.0-rc.2/manifests"},{"name":"v2.1.0-rc.1","sha":"02f9727dd88705363d766f7c472fe7c81facce6a","kind":"tag","published_at":"2018-12-18T20:32:34.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.1.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.1.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.1.0-rc.1/manifests"},{"name":"v2.0.2","sha":"b047d28476e274bca2a6091c280a7f55afe74e10","kind":"tag","published_at":"2018-10-22T12:56:41.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.2/manifests"},{"name":"v2.0.0","sha":"06e265b38d3e9daeaa7b33f9035c700d6bc0c6a0","kind":"tag","published_at":"2018-10-21T15:34:13.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0/manifests"},{"name":"v2.0.0-rc.4","sha":"7789814606e6e7a485d386d25ab84f0445246f8f","kind":"tag","published_at":"2018-10-21T00:58:03.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.0-rc.4","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.0-rc.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.4/manifests"},{"name":"v2.0.0-rc.3","sha":"2d30918149c1d61da3cf52d20f2381574b80cf33","kind":"commit","published_at":"2018-10-04T14:17:57.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.0-rc.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.0-rc.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.3/manifests"},{"name":"v2.0.0-rc.2","sha":"dac5bccf803696d9d98d269b8c27c7aac5fa1c5c","kind":"tag","published_at":"2018-09-18T22:33:54.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.2/manifests"},{"name":"v2.0.0-rc.1","sha":"735996e98378f547c89d74e67631772d420fd314","kind":"tag","published_at":"2018-09-07T17:44:19.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v2.0.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v2.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v2.0.0-rc.1/manifests"},{"name":"v1.9.4","sha":"a23d42fc04d4a3f9e6d7bd9626538dcfd717cbd5","kind":"tag","published_at":"2018-08-27T22:08:43.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.9.4","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.4/manifests"},{"name":"v1.9.3","sha":"8f4610e0076380a9bb53e56f2206009db1ec726b","kind":"tag","published_at":"2018-08-23T17:59:46.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.9.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.3/manifests"},{"name":"v1.9.2","sha":"198dbf348c0eb52db365b7c78d058b8ed0319984","kind":"tag","published_at":"2018-08-23T15:05:55.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.9.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.2/manifests"},{"name":"v1.12.0","sha":"0e65947efbffc592cffea8c2ae9d3b8e11659854","kind":"tag","published_at":"2018-08-10T22:09:47.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.12.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0/manifests"},{"name":"v1.12.0-rc.2","sha":"59cb2e2d0ff32f3375e549a40e695c973876ce1c","kind":"tag","published_at":"2018-08-03T18:47:48.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.12.0-rc.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.12.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0-rc.2/manifests"},{"name":"v1.12.0-rc.1","sha":"3806d6128ebb18c377bde2e44b625b883c1b5308","kind":"tag","published_at":"2018-08-01T18:01:09.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.12.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.12.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.12.0-rc.1/manifests"},{"name":"v1.11.0","sha":"cc9fa577771f2a473e1b407de2d8133849fa1513","kind":"tag","published_at":"2018-07-13T20:07:52.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.11.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.11.0/manifests"},{"name":"v1.11.0-rc.1","sha":"eb4dfea6e9a1cd849cd2e12dd153f03910695f58","kind":"tag","published_at":"2018-07-03T22:33:33.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.11.0-rc.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.11.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.11.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.11.0-rc.1/manifests"},{"name":"v1.10.0","sha":"feb665136c0dae9912e08397c1a21c4af3651ef3","kind":"tag","published_at":"2018-06-05T20:40:24.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.10.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.10.0/manifests"},{"name":"v1.9.1","sha":"6e070c91e8b4e60aba608cd3d3bb3452b5d121b3","kind":"tag","published_at":"2018-05-23T00:01:40.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.9.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.1/manifests"},{"name":"v1.9.0","sha":"4a10f727c4756a8f6433f272a49e7a15db5e4b8f","kind":"tag","published_at":"2018-04-26T19:36:06.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.9.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"cacf03641c5078963ae3e011588136d75d753764","kind":"tag","published_at":"2018-03-23T18:14:58.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.8.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"9ea4bae313ed73b92c62e2606309c3ec6d528bec","kind":"tag","published_at":"2018-02-20T21:16:53.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.7.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"0541347034a1401af0eca447f0b4acc29cbad56b","kind":"tag","published_at":"2018-01-23T20:48:46.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.6.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"4073cf658556e1f9338ae18c121500cb64afe8f8","kind":"tag","published_at":"2017-12-22T23:01:54.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.5.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"b7e7c765e023ea66cd6bdeb65bf64d407587c9da","kind":"tag","published_at":"2017-11-23T17:22:45.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.4.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"725ed40a57e8973b3ae6e2f39f9c887d0056ca39","kind":"tag","published_at":"2017-09-21T17:20:27.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.3.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"e2fdf09e9bb991ab019b461e14d3dabc3c374d67","kind":"tag","published_at":"2017-07-18T18:08:20.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.2.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"7434b3d6d2063e866be9908b06e254a9a80696d4","kind":"tag","published_at":"2017-07-02T21:54:19.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.1.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.1.0/manifests"},{"name":"v1.0.7","sha":"7b9c1429d918a3cf685a1e85fd497d9cc3cf350e","kind":"tag","published_at":"2017-06-09T22:31:28.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.7","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.7/manifests"},{"name":"v1.0.6","sha":"e1eed257f19bdcd0e6684eaf96ae389873dc7bf3","kind":"tag","published_at":"2017-05-29T21:30:02.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.6","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.6/manifests"},{"name":"v1.0.5","sha":"7ac697be2c1e599392730d15bf0234fe76df290b","kind":"tag","published_at":"2017-05-09T18:45:58.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.5","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"15169b245b3242f6aad25097549926fc5128e710","kind":"tag","published_at":"2017-03-09T18:04:39.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.4","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"eb2cb5dd0659f06f006cc474a99f6f6dd3c6a7dd","kind":"tag","published_at":"2017-03-06T14:15:18.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.3","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"8cd58303f9d4de0a1a11423fa1678361bfbec67c","kind":"tag","published_at":"2017-02-23T15:57:08.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.2","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"ac6f9288a88c109dc3ccddd68904b21d5a75094b","kind":"tag","published_at":"2017-01-05T18:39:03.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.1","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"55e2d17e7122daa801714ef019032ecee6cc4764","kind":"tag","published_at":"2016-11-24T04:23:10.000Z","download_url":"https://codeload.github.com/OpenZeppelin/openzeppelin-contracts/tar.gz/v1.0.0","html_url":"https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2024-09-07T16:04:42.941Z","dependent_packages_count":3207,"downloads":2595452,"downloads_period":"last-month","dependent_repos_count":34743,"rankings":{"downloads":0.2054825433265462,"dependent_repos_count":0.1686290709504085,"dependent_packages_count":0.03208149389373609,"stargazers_count":0.6238343338783885,"forks_count":0.3770938883891752,"docker_downloads_count":0.5974172097666877,"average":0.3340897567008237},"purl":"pkg:npm/%40openzeppelin/contracts","advisories":[{"uuid":"GSA_kwCzR0hTQS05cmN3LWMyZjktMmo1Nc4ABKP_","url":"https://github.com/advisories/GHSA-9rcw-c2f9-2j55","title":"OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers","description":"### Impact\n\nThe `lastIndexOf(bytes,byte,uint256)` function of the `Bytes.sol` library may access uninitialized memory when the following two conditions hold: 1) the provided buffer length is empty (i.e. `buffer.length == 0`) and position is not `2**256 - 1` (i.e. `pos != type(uint256).max`).\n\nThe `pos` argument could be used to access arbitrary data outside of the buffer bounds. This could lead to the operation running out of gas, or returning an invalid index (outside of the empty buffer). Processing this invalid result for accessing the `buffer` would cause a revert under normal conditions.\n\nWhen triggered, the function reads memory at offset `buffer + 0x20 + pos`. If memory at that location (outside the `buffer`) matches the search pattern, the function would return an out of bound index instead of the expected `type(uint256).max`. This creates unexpected behavior where callers receive a valid-looking index pointing outside buffer bounds.\n\nSubsequent memory accesses that don't check bounds and use the returned index must carefully review the potential impact depending on their setup. Code relying on this function returning `type(uint256).max` for empty buffers or using the returned index without bounds checking could exhibit undefined behavior.\n\n### Patches\n\nUpgrade to 5.4.0","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-07-17T21:19:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9rcw-c2f9-2j55","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/5797","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.4.0","https://nvd.nist.gov/vuln/detail/CVE-2025-54070","https://github.com/advisories/GHSA-9rcw-c2f9-2j55"],"source_kind":"github","identifiers":["GHSA-9rcw-c2f9-2j55","CVE-2025-54070"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":31.33198448269843,"created_at":"2025-07-17T22:08:33.014Z","updated_at":"2026-06-14T01:03:15.476Z","epss_percentage":0.00281,"epss_percentile":0.5155,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cmN3LWMyZjktMmo1Nc4ABKP_","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05cmN3LWMyZjktMmo1Nc4ABKP_","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"5.4.0","vulnerable_version_range":"\u003e= 5.2.0, \u003c 5.4.0"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"5.4.0","vulnerable_version_range":"\u003e= 5.2.0, \u003c 5.4.0"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cmN3LWMyZjktMmo1Nc4ABKP_/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05dng2LTd4eGYteDk2N84AA5qR","url":"https://github.com/advisories/GHSA-9vx6-7xxf-x967","title":"OpenZeppelin Contracts base64 encoding may read from potentially dirty memory","description":"### Impact\n\nThe `Base64.encode` function encodes a `bytes` input by iterating over it in chunks of 3 bytes. When this input is not a multiple of 3, the last iteration may read parts of the memory that are beyond the input buffer.\n\nAlthough the `encode` function pads the output for these cases, up to 4 bits of data are kept between the encoding and padding, corrupting the output if these bits were dirty (i.e. memory after the input is not 0). These conditions are more frequent in the following scenarios:\n\n- A `bytes memory` struct is allocated just after the input and the first bytes of it are non-zero.\n- The memory pointer is set to a non-empty memory location before allocating the input.\n\nDevelopers should evaluate whether the extra bits can be maliciously manipulated by an attacker.\n\n### Patches\n\nUpgrade to 5.0.2 or 4.9.6.\n\n### References\n\nThis issue was reported by the Independent Security Researcher Riley Holterhus through Immunefi (@rileyholterhus on X)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-02-29T20:09:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9vx6-7xxf-x967","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/2d081f24cac1a867f6f73d512f2022e1fa987854","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/723f8cab09cdae1aca9ec9cc1cfa040c2d4b06c1","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/92224533b1263772b0774eec3134e132a3d7b2a6","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/a6286d0fded8771b3a645e5813e51993c490399c","https://nvd.nist.gov/vuln/detail/CVE-2024-27094","https://github.com/advisories/GHSA-9vx6-7xxf-x967"],"source_kind":"github","identifiers":["GHSA-9vx6-7xxf-x967","CVE-2024-27094"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2024-02-29T21:04:44.135Z","updated_at":"2026-06-19T03:06:32.913Z","epss_percentage":0.00564,"epss_percentile":0.68513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05dng2LTd4eGYteDk2N84AA5qR","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05dng2LTd4eGYteDk2N84AA5qR","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"5.0.2","vulnerable_version_range":"\u003e= 5.0.0-rc.0, \u003c 5.0.2"},{"first_patched_version":"4.9.6","vulnerable_version_range":"\u003e= 4.5.0, \u003c 4.9.6"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"5.0.2","vulnerable_version_range":"\u003e= 5.0.0-rc.0, \u003c 5.0.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05dng2LTd4eGYteDk2N84AA5qR/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02OTlnLXE2cWgtcTR2OM4AA3q7","url":"https://github.com/advisories/GHSA-699g-q6qh-q4v8","title":"OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4","description":"\n### Context\nMerge conflict resolution issue when porting the v5.0.1 `Multicall` update to the v4.9 branch caused a duplicated line.\n\n### Impact\nVersions using `Multicall` from `@openzeppelin/contracts@4.9.4` and `@openzeppelin/contracts-upgradeable@4.9.4` will execute each subcall twice. Concretely, this exposes a user to unintentionally duplicate operations like asset transfers.\n\n### Patches\nThe duplicated `delegatecall` was removed in 4.9.5. The 4.9.4 version is marked as deprecated.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-12-12T00:49:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-699g-q6qh-q4v8","https://nvd.nist.gov/vuln/detail/CVE-2023-49798","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/31f9fb9d171f60b2271b2b9c6f62d43302bf9489","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/88ac712e06832bce73b41e8166cded2729e25205","https://github.com/advisories/GHSA-699g-q6qh-q4v8"],"source_kind":"github","identifiers":["GHSA-699g-q6qh-q4v8","CVE-2023-49798"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-12-12T01:05:53.652Z","updated_at":"2026-04-05T20:07:01.704Z","epss_percentage":0.00492,"epss_percentile":0.65504,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OTlnLXE2cWgtcTR2OM4AA3q7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02OTlnLXE2cWgtcTR2OM4AA3q7","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.9.5","vulnerable_version_range":"= 4.9.4"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.9.5","vulnerable_version_range":"= 4.9.4"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OTlnLXE2cWgtcTR2OM4AA3q7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1nNHZwLW02ODItcXFtcM4AA1Qt","url":"https://github.com/advisories/GHSA-g4vp-m682-qqmp","title":"OpenZeppelin Contracts vulnerable to Improper Escaping of Output","description":"### Impact\n\nOpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls that originate from the forwarder with calldata shorter than 20 bytes. This combination of circumstances does not appear to be common, in particular it is not the case for `MinimalForwarder` from OpenZeppelin Contracts, or any deployed forwarder the team is aware of, given that the signer address is appended to all calls that originate from these forwarders.\n\n### Patches\n\nThe problem has been patched in v4.9.3.\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-08-11T19:00:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-g4vp-m682-qqmp","https://nvd.nist.gov/vuln/detail/CVE-2023-40014","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4481","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4484","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/9445f96223041abf2bf08daa56f8da50b674cbcd","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/e4435eed757d4309436b1e06608e97b6d6e2fdb5","https://github.com/OpenZeppelin/openzeppelin-contracts/blob/v4.9.3/CHANGELOG.md","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.3","https://github.com/advisories/GHSA-g4vp-m682-qqmp"],"source_kind":"github","identifiers":["GHSA-g4vp-m682-qqmp","CVE-2023-40014"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-08-11T20:05:17.158Z","updated_at":"2026-06-09T13:09:05.762Z","epss_percentage":0.00653,"epss_percentile":0.7135,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNHZwLW02ODItcXFtcM4AA1Qt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1nNHZwLW02ODItcXFtcM4AA1Qt","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.9.3","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.9.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.9.3","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.9.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNHZwLW02ODItcXFtcM4AA1Qt/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13cHJ2LTkzcjQtamoycM4AAz8m","url":"https://github.com/advisories/GHSA-wprv-93r4-jj2p","title":"OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees","description":"### Impact\n\nWhen the `verifyMultiProof`, `verifyMultiProofCalldata`, `processMultiProof`, or `processMultiProofCalldata` functions are in use, it is possible to construct merkle trees that allow forging a valid multiproof for an arbitrary set of leaves.\n\nA contract may be vulnerable if it uses multiproofs for verification and the merkle tree that is processed includes a node with value 0 at depth 1 (just under the root). This could happen inadvertently for balanced trees with 3 leaves or less, if the leaves are not hashed. This could happen deliberately if a malicious tree builder includes such a node in the tree.\n\nA contract is not vulnerable if it uses single-leaf proving (`verify`, `verifyCalldata`, `processProof`, or `processProofCalldata`), or if it uses multiproofs with a known tree that has hashed leaves. Standard merkle trees produced or validated with the [@openzeppelin/merkle-tree](https://github.com/OpenZeppelin/merkle-tree) library are safe.\n\n### Patches\n\nThe problem has been patched in 4.9.2.\n\n### Workarounds\n\nIf you are using multiproofs: When constructing merkle trees hash the leaves and do not insert empty nodes in your trees. Using the [@openzeppelin/merkle-tree](https://www.npmjs.com/package/@openzeppelin/merkle-tree) package eliminates this issue. Do not accept user-provided merkle roots without reconstructing at least the first level of the tree. Verify the merkle tree structure by reconstructing it from the leaves.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-06-19T19:46:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-wprv-93r4-jj2p","https://nvd.nist.gov/vuln/detail/CVE-2023-34459","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/4d2383e17186be3e8ccf5a442e9686ecc7de1c55","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.2","https://github.com/advisories/GHSA-wprv-93r4-jj2p"],"source_kind":"github","identifiers":["GHSA-wprv-93r4-jj2p","CVE-2023-34459"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-06-19T20:03:26.863Z","updated_at":"2026-06-17T17:09:45.035Z","epss_percentage":0.00863,"epss_percentile":0.75513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cHJ2LTkzcjQtamoycM4AAz8m","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cHJ2LTkzcjQtamoycM4AAz8m","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.9.2","vulnerable_version_range":"\u003e= 4.7.0, \u003c 4.9.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.9.2","vulnerable_version_range":"\u003e= 4.7.0, \u003c 4.9.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cHJ2LTkzcjQtamoycM4AAz8m/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01aDN4LTl3dnEtdzRtMs4AAzvg","url":"https://github.com/advisories/GHSA-5h3x-9wvq-w4m2","title":"OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning","description":"### Impact\n\nBy frontrunning the creation of a proposal, an attacker can become the proposer and gain the ability to cancel it. The attacker can do this repeatedly to try to prevent a proposal from being proposed at all.\n\nThis impacts the `Governor` contract in v4.9.0 only, and the `GovernorCompatibilityBravo` contract since v4.3.0.\n\n### Patches\n\nThe problem has been patched in 4.9.1 by introducing opt-in frontrunning protection.\n\n### Workarounds\n\nSubmit the proposal creation transaction to an endpoint with frontrunning protection.\n\n### Credit\n\nReported by Lior Abadi and Joaquin Pereyra from Coinspect.\n\n### References\n\nhttps://www.coinspect.com/openzeppelin-governor-dos/","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-06-08T18:03:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-5h3x-9wvq-w4m2","https://nvd.nist.gov/vuln/detail/CVE-2023-34234","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/d9474327a492f9f310f31bc53f38dbea56ed9a57","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.1","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/66f390fa516b550838e2c2f65132b5bc2afe1ced","https://github.com/advisories/GHSA-5h3x-9wvq-w4m2"],"source_kind":"github","identifiers":["GHSA-5h3x-9wvq-w4m2","CVE-2023-34234"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-06-08T19:03:29.069Z","updated_at":"2026-06-14T01:06:48.934Z","epss_percentage":0.00323,"epss_percentile":0.55757,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01aDN4LTl3dnEtdzRtMs4AAzvg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01aDN4LTl3dnEtdzRtMs4AAzvg","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.9.1","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.9.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.9.1","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.9.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01aDN4LTl3dnEtdzRtMs4AAzvg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05M2hxLTV3Z2MtamM4Ms4AAy45","url":"https://github.com/advisories/GHSA-93hq-5wgc-jc82","title":"GovernorCompatibilityBravo may trim proposal calldata","description":"### Impact\n\nThe proposal creation entrypoint (`propose`) in `GovernorCompatibilityBravo` allows the creation of proposals with a `signatures` array shorter than the `calldatas` array. This causes the additional elements of the latter to be ignored, and if the proposal succeeds the corresponding actions would eventually execute without any calldata. The `ProposalCreated` event correctly represents what will eventually execute, but the proposal parameters as queried through `getActions` appear to respect the original intended calldata.\n\n### Patches\n\nThis issue has been patched in v4.8.3.\n\n### Workarounds\n\nEnsure that all proposals that pass through governance have equal length `signatures` and `calldatas` parameters.\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-04-20T14:11:03.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82","https://nvd.nist.gov/vuln/detail/CVE-2023-30542","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/8d633cb7d169f2f8595b273660b00b69e845c2fe","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3","https://github.com/advisories/GHSA-93hq-5wgc-jc82"],"source_kind":"github","identifiers":["GHSA-93hq-5wgc-jc82","CVE-2023-30542"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-04-20T15:03:29.189Z","updated_at":"2026-06-17T17:09:57.172Z","epss_percentage":0.00535,"epss_percentile":0.67501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05M2hxLTV3Z2MtamM4Ms4AAy45","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05M2hxLTV3Z2MtamM4Ms4AAy45","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.8.3","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.8.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.8.3","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.8.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05M2hxLTV3Z2MtamM4Ms4AAy45/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1teDJxLTM1bTIteDJyaM4AAy0V","url":"https://github.com/advisories/GHSA-mx2q-35m2-x2rh","title":"OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated","description":"### Impact\n\nA function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the arguments from calldata.\n\nThe probability of an accidental clash is negligible, but one could be caused deliberately.\n\n### Patches\n\nThe issue has been fixed in v4.8.3.\n\n### Workarounds\n\nIf a function appears to be inaccessible for this reason, it may be possible to craft the calldata such that ABI decoding does not fail at the proxy and the function is properly proxied through.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-04-17T16:45:21.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154","https://nvd.nist.gov/vuln/detail/CVE-2023-30541","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/58fa0f81c4036f1a3b616fdffad2fd27e5d5ce21","https://github.com/advisories/GHSA-mx2q-35m2-x2rh"],"source_kind":"github","identifiers":["GHSA-mx2q-35m2-x2rh","CVE-2023-30541"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-04-17T17:03:21.163Z","updated_at":"2026-05-19T03:07:44.626Z","epss_percentage":0.00452,"epss_percentile":0.63762,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1teDJxLTM1bTIteDJyaM4AAy0V","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1teDJxLTM1bTIteDJyaM4AAy0V","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.8.3","vulnerable_version_range":"\u003e= 3.2.0, \u003c 4.8.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.8.3","vulnerable_version_range":"\u003e= 3.2.0, \u003c 4.8.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1teDJxLTM1bTIteDJyaM4AAy0V/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04NzhtLTNnNnEtNTk0cc4AAx7E","url":"https://github.com/advisories/GHSA-878m-3g6q-594q","title":"OpenZeppelin Contracts contains Incorrect Calculation","description":"### Impact\n\nThe ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by `balanceOf`.\n\nThe issue exclusively presents with batches of size 1.\n\n### Patches\n\nThe issue has been patched in 4.8.2.\n\n\u003c!-- ### References --\u003e\n\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-03-03T20:02:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-878m-3g6q-594q","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/167bf67ed3907f4a674043496019fa346cee7705","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2","https://nvd.nist.gov/vuln/detail/CVE-2023-26488","https://github.com/advisories/GHSA-878m-3g6q-594q"],"source_kind":"github","identifiers":["GHSA-878m-3g6q-594q","CVE-2023-26488"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2023-03-03T21:03:11.944Z","updated_at":"2026-06-18T16:10:17.897Z","epss_percentage":0.00319,"epss_percentile":0.55519,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04NzhtLTNnNnEtNTk0cc4AAx7E","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04NzhtLTNnNnEtNTk0cc4AAx7E","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.8.2","vulnerable_version_range":"\u003e= 4.8.0, \u003c 4.8.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.8.2","vulnerable_version_range":"\u003e= 4.8.0, \u003c 4.8.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04NzhtLTNnNnEtNTk0cc4AAx7E/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00aDk4LTI3NjktZ2g2aM4AAuFk","url":"https://github.com/advisories/GHSA-4h98-2769-gh6h","title":"OpenZeppelin Contracts vulnerable to ECDSA signature malleability","description":"### Impact\n\nThe functions `ECDSA.recover` and `ECDSA.tryRecover` are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 byte signature format. This is only an issue for the functions that take a single `bytes` argument, and not the functions that take `r, v, s` or `r, vs` as separate arguments.\n\nThe potentially affected contracts are those that implement signature reuse or replay protection by marking the signature itself as used rather than the signed message or a nonce included in it. A user may take a signature that has already been submitted, submit it again in a different form, and bypass this protection.\n\n### Patches\n\nThe issue has been patched in 4.7.3.\n\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-08-18T19:00:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4h98-2769-gh6h","https://nvd.nist.gov/vuln/detail/CVE-2022-35961","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3610","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/d693d89d99325f395182e4f547dbf5ff8e5c3c87","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.3","https://github.com/advisories/GHSA-4h98-2769-gh6h"],"source_kind":"github","identifiers":["GHSA-4h98-2769-gh6h","CVE-2022-35961"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:01.014Z","updated_at":"2026-06-19T03:09:53.052Z","epss_percentage":0.00164,"epss_percentile":0.37476,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00aDk4LTI3NjktZ2g2aM4AAuFk","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00aDk4LTI3NjktZ2g2aM4AAuFk","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.3","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.7.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable","statistics":{"dependent_packages_count":853,"dependent_repos_count":4919,"downloads":1134090,"downloads_period":"last-month"},"affected_versions":["4.1.0","4.2.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.5.1","4.5.2","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1","4.7.2"],"unaffected_versions":["3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.0.0","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.6.1"]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.3","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.7.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["4.1.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1","4.7.2"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.0.0","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00aDk4LTI3NjktZ2g2aM4AAuFk/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14cmM0LTczN3YtOXE3Nc4AAuFh","url":"https://github.com/advisories/GHSA-xrc4-737v-9q75","title":"OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals","description":"### Impact\n\nThis issue concerns instances of Governor that use the module `GovernorVotesQuorumFraction`, a mechanism that determines quorum requirements as a percentage of the voting token's total supply. In affected instances, when a proposal is passed to lower the quorum requirement, past proposals may become executable if they had been defeated only due to lack of quorum, and the number of votes it received meets the new quorum requirement.\n\nAnalysis of instances on chain found only one proposal that met this condition, and we are actively monitoring for new occurrences of this particular issue.\n\n### Patches\n\nThis issue has been patched in v4.7.2.\n\n### Workarounds\n\nAvoid lowering quorum requirements if a past proposal was defeated for lack of quorum.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-08-18T18:48:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-xrc4-737v-9q75","https://nvd.nist.gov/vuln/detail/CVE-2022-31198","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2","https://github.com/advisories/GHSA-xrc4-737v-9q75"],"source_kind":"github","identifiers":["GHSA-xrc4-737v-9q75","CVE-2022-31198"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:01.057Z","updated_at":"2026-06-19T03:09:53.054Z","epss_percentage":0.00266,"epss_percentile":0.50568,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14cmM0LTczN3YtOXE3Nc4AAuFh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14cmM0LTczN3YtOXE3Nc4AAuFh","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable","statistics":{"dependent_packages_count":853,"dependent_repos_count":4919,"downloads":1134090,"downloads_period":"last-month"},"affected_versions":["4.3.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.5.1","4.5.2","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1"],"unaffected_versions":["3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.2.0","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.6.1"]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["4.3.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.2.0","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14cmM0LTczN3YtOXE3Nc4AAuFh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05ajNtLWczODMtMjlxcs4AAuAp","url":"https://github.com/advisories/GHSA-9j3m-g383-29qr","title":"OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls","description":"### Impact\n\nContracts using the cross chain utilies for Arbitrum L2, `CrossChainEnabledArbitrumL2` or `LibArbitrumL2`, will classify direct interactions of externally owned accounts (EOAs) as cross chain calls, even though they are not started on L1. This is assessed as low severity because any action taken by an EOA on the contract could also be taken by the EOA through the bridge if the issue was not present.\n\n### Patches\n\nThis issue has been patched in v4.7.2.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3578\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-08-14T00:25:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9j3m-g383-29qr","https://nvd.nist.gov/vuln/detail/CVE-2022-35916","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3578","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2","https://github.com/advisories/GHSA-9j3m-g383-29qr"],"source_kind":"github","identifiers":["GHSA-9j3m-g383-29qr","CVE-2022-35916"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:01.259Z","updated_at":"2026-06-04T03:09:27.709Z","epss_percentage":0.00244,"epss_percentile":0.47537,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05ajNtLWczODMtMjlxcs4AAuAp","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05ajNtLWczODMtMjlxcs4AAuAp","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 4.6.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 4.6.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05ajNtLWczODMtMjlxcs4AAuAp/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03Z3JmLTgzdnctNmY1eM4AAuAo","url":"https://github.com/advisories/GHSA-7grf-83vw-6f5x","title":"OpenZeppelin Contracts ERC165Checker unbounded gas consumption","description":"### Impact\n\nThe target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost.\n\n### Patches\n\nThe issue has been fixed in v4.7.2.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3587\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-08-14T00:23:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-7grf-83vw-6f5x","https://nvd.nist.gov/vuln/detail/CVE-2022-35915","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3587","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.2","https://github.com/advisories/GHSA-7grf-83vw-6f5x"],"source_kind":"github","identifiers":["GHSA-7grf-83vw-6f5x","CVE-2022-35915"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:01.275Z","updated_at":"2026-06-19T03:09:54.246Z","epss_percentage":0.00305,"epss_percentile":0.53534,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z3JmLTgzdnctNmY1eM4AAuAo","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03Z3JmLTgzdnctNmY1eM4AAuAo","packages":[{"ecosystem":"npm","package_name":"openzeppelin-eth","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.2.0"}],"purl":"pkg:npm/openzeppelin-eth","statistics":{"dependent_packages_count":37,"dependent_repos_count":107,"downloads":1462,"downloads_period":"last-month"},"affected_versions":["2.0.0","2.0.1","2.0.2","2.0.2-standalone","2.1.2","2.1.3","2.2.0"],"unaffected_versions":[]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 3.2.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable","statistics":{"dependent_packages_count":853,"dependent_repos_count":4919,"downloads":1134090,"downloads_period":"last-month"},"affected_versions":["3.2.0","3.2.2-solc-0.7","3.3.0","3.3.0-solc-0.7","3.4.0","3.4.0-rc.0","3.4.0-solc-0.7","3.4.0-solc-0.7-2","3.4.1","3.4.1-solc-0.7","3.4.1-solc-0.7-2","3.4.2","3.4.2-solc-0.7","4.0.0","4.0.0-beta.0","4.0.0-rc.0","4.1.0","4.1.0-rc.0","4.2.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.5.1","4.5.2","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1"],"unaffected_versions":["4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.6.1"]},{"ecosystem":"npm","package_name":"openzeppelin-solidity","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 2.0.0, \u003c= 4.6.0"}],"purl":"pkg:npm/openzeppelin-solidity","statistics":{"dependent_packages_count":544,"dependent_repos_count":4382,"downloads":72464,"downloads_period":"last-month"},"affected_versions":["2.0.0","2.0.1","2.1.0","2.1.0-rc.1","2.1.0-rc.2","2.1.1","2.1.2","2.1.3","2.2.0","2.2.0-rc.1","2.3.0","2.3.0-rc.0","2.3.0-rc.1","2.3.0-rc.2","2.3.0-rc.3","2.4.0","2.4.0-beta.0","2.4.0-beta.1","2.4.0-beta.2","2.5.0","2.5.0-rc.0","2.5.1","3.0.0","3.0.0-beta.0","3.0.0-rc.0","3.0.0-rc.1","3.0.1","3.0.2","3.1.0","3.1.0-rc.0","3.2.0","3.2.0-rc.0","3.3.0","3.3.0-rc.0","3.3.0-rc.1","3.3.0-rc.2","3.4.0","3.4.0-rc.0","3.4.1","3.4.1-solc-0.7","3.4.2","3.4.2-solc-0.7","4.0.0","4.0.0-beta.0","4.0.0-beta.1","4.0.0-rc.0","4.1.0","4.1.0-rc.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.1","4.4.2","4.5.0","4.6.0","4.6.0-rc.0"],"unaffected_versions":["1.8.0","1.9.0","1.10.0","1.11.0","1.12.0","4.8.1"]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.2","vulnerable_version_range":"\u003e= 2.0.0, \u003c 4.7.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["2.3.0","2.4.0","2.4.0-beta.0","2.4.0-beta.1","2.4.0-beta.2","2.5.0","2.5.0-rc.0","2.5.1","3.0.0","3.0.0-beta.0","3.0.0-rc.0","3.0.0-rc.1","3.0.1","3.0.2","3.1.0","3.1.0-rc.0","3.1.0-solc-0.7","3.2.0","3.2.0-rc.0","3.2.0-solc-0.7","3.2.1-solc-0.7","3.2.2-solc-0.7","3.3.0","3.3.0-rc.0","3.3.0-rc.1","3.3.0-rc.2","3.3.0-solc-0.7","3.4.0","3.4.0-rc.0","3.4.0-solc-0.7","3.4.1","3.4.1-solc-0.7","3.4.1-solc-0.7-2","3.4.2","3.4.2-solc-0.7","4.0.0","4.0.0-beta.0","4.0.0-beta.1","4.0.0-rc.0","4.1.0","4.1.0-rc.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0","4.7.1"],"unaffected_versions":["4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z3JmLTgzdnctNmY1eM4AAuAo/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00ZzYzLWM2NG0tMjV3Oc4AAtkM","url":"https://github.com/advisories/GHSA-4g63-c64m-25w9","title":"OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers","description":"### Impact\n\n`SignatureChecker.isValidSignatureNow` is not expected to revert. However, an incorrect assumption about Solidity 0.8's `abi.decode` allows some cases to revert, given a target contract that doesn't implement EIP-1271 as expected.\n\nThe contracts that may be affected are those that use `SignatureChecker` to check the validity of a signature and handle invalid signatures in a way other than reverting. We believe this to be unlikely.\n\n### Patches\n\nThe issue was patched in 4.7.1.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-07-21T22:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4g63-c64m-25w9","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552","https://nvd.nist.gov/vuln/detail/CVE-2022-31172","https://github.com/advisories/GHSA-4g63-c64m-25w9"],"source_kind":"github","identifiers":["GHSA-4g63-c64m-25w9","CVE-2022-31172"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:09.999Z","updated_at":"2026-06-04T03:09:31.172Z","epss_percentage":0.00175,"epss_percentile":0.38608,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00ZzYzLWM2NG0tMjV3Oc4AAtkM","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00ZzYzLWM2NG0tMjV3Oc4AAtkM","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.1","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.7.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.1","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.7.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00ZzYzLWM2NG0tMjV3Oc4AAtkM/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xaDl4LWdjZmgtcGNyd84AAtkL","url":"https://github.com/advisories/GHSA-qh9x-gcfh-pcrw","title":"OpenZeppelin Contracts's ERC165Checker may revert instead of returning false","description":"### Impact\n\n`ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8's `abi.decode` allows some cases to revert, given a target contract that doesn't implement EIP-165 as expected, specifically if it returns a value other than 0 or 1.\n\nThe contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting.\n\n### Patches\n\nThe issue was patched in 4.7.1.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance deploying the fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-07-21T22:33:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-qh9x-gcfh-pcrw","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552","https://nvd.nist.gov/vuln/detail/CVE-2022-31170","https://github.com/advisories/GHSA-qh9x-gcfh-pcrw"],"source_kind":"github","identifiers":["GHSA-qh9x-gcfh-pcrw","CVE-2022-31170"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:10.007Z","updated_at":"2026-06-19T03:09:56.489Z","epss_percentage":0.00373,"epss_percentile":0.59575,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xaDl4LWdjZmgtcGNyd84AAtkL","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xaDl4LWdjZmgtcGNyd84AAtkL","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.7.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.7.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable","statistics":{"dependent_packages_count":853,"dependent_repos_count":4919,"downloads":1134090,"downloads_period":"last-month"},"affected_versions":["4.0.0","4.1.0","4.1.0-rc.0","4.2.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.5.1","4.5.2","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0"],"unaffected_versions":["3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.6.1"]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.7.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.7.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["4.0.0","4.1.0","4.1.0-rc.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.0-rc.1","4.4.1","4.4.2","4.5.0","4.5.0-rc.0","4.6.0","4.6.0-rc.0","4.7.0","4.7.0-rc.0"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xaDl4LWdjZmgtcGNyd84AAtkL/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04OGc4LWY1bWYtZjVyas0o5A","url":"https://github.com/advisories/GHSA-88g8-f5mf-f5rj","title":"Improper Initialization in OpenZeppelin","description":"In OpenZeppelin \u003c=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they make an untrusted non-view external call. Once an initializer has finished running it can never be re-executed. However, an exception put in place to support multiple inheritance made reentrancy possible, breaking the expectation that there is a single execution.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-02-05T00:00:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9c22-pwxw-p6hx","https://nvd.nist.gov/vuln/detail/CVE-2021-46320","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3006","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.4.1","https://github.com/advisories/GHSA-88g8-f5mf-f5rj"],"source_kind":"github","identifiers":["GHSA-88g8-f5mf-f5rj","CVE-2021-46320"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:35.992Z","updated_at":"2026-04-28T20:09:46.271Z","epss_percentage":0.00517,"epss_percentile":0.66506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04OGc4LWY1bWYtZjVyas0o5A","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04OGc4LWY1bWYtZjVyas0o5A","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.4.1","vulnerable_version_range":"\u003c 4.4.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04OGc4LWY1bWYtZjVyas0o5A/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tNnc4LWZxN3YtcGg0bc0h8A","url":"https://github.com/advisories/GHSA-m6w8-fq7v-ph4m","title":"GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior","description":"### Impact\n\nThe `GovernorCompatibilityBravo` module may lead to the creation of governance proposals that execute function calls with incorrect arguments due to bad ABI encoding. This happens if the proposal is created using explicit function signatures, e.g. a proposal to invoke the function `foo(uint256)` is created as `propose([target], [0], [\"foo(uint256)\"], [\"0x00..01\"])`. If the function selector is provided as part of the encoded proposal data the issue is not present, e.g. the same proposal is created as `propose([target], [0], [\"0x2fbebd3800..01\"])`, where `2fbebd38` is the function selector.\n\nWe've assessed the instances of this contract found on chain, and did not find any occurrence of this bug in the past. Proposal creation through Tally or OpenZeppelin Defender is not affected. The core `Governor` contract on its own is not affected.\n\n### Patches\n\nA fix is included in version v4.4.2 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`.\n\n### Workarounds\n\nDo not create proposals using explicit function signatures. Instead, use the `propose` function without the `signatures` argument, and create the proposal using the fully ABI-encoded function call including the function selector in the `calldatas` argument as explained above.\n\n### References\n\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/issues/3099\n\n### Credits\n\nThis issue was identified and reported by @GeraldHost.\n\n### For more information\n\nIf you have any questions, comments, or need assistance regarding this advisory, email us at security@openzeppelin.com.\n\nTo submit security reports please use [our bug bounty on Immunefi](https://immunefi.com/bounty/openzeppelin/).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-01-13T16:09:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-m6w8-fq7v-ph4m","https://github.com/advisories/GHSA-m6w8-fq7v-ph4m"],"source_kind":"github","identifiers":["GHSA-m6w8-fq7v-ph4m"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:38.662Z","updated_at":"2026-05-22T03:12:30.491Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNnc4LWZxN3YtcGg0bc0h8A","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tNnc4LWZxN3YtcGg0bc0h8A","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.4.2","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.4.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.4.2","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.4.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNnc4LWZxN3YtcGg0bc0h8A/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05YzIyLXB3eHctcDZoeM0bQg","url":"https://github.com/advisories/GHSA-9c22-pwxw-p6hx","title":"OpenZeppelin Contracts initializer reentrancy may lead to double initialization","description":"### Impact\n\nInitializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they make an untrusted non-view external call.\n\nOnce an initializer has finished running it can never be re-executed. However, an exception put in place to support multiple inheritance made reentrancy possible in the scenario described above, breaking the expectation that there is a single execution.\n\nNote that upgradeable proxies are commonly initialized together with contract creation, where reentrancy is not feasible, so the impact of this issue is believed to be minor.\n\n### Patches\n\nA fix is included in the version v4.4.1 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`.\n\n### Workarounds\n\nAvoid untrusted external calls during initialization.\n\n### References\nhttps://github.com/OpenZeppelin/openzeppelin-contracts/pull/3006\n\n### Credits\n\nThis issue was identified and reported by @chaitinblockchain through [our bug bounty on Immunefi](https://immunefi.com/bounty/openzeppelin/).\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance executing the mitigation, email us at security@openzeppelin.com.\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-12-14T21:47:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.6,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9c22-pwxw-p6hx","https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3006","https://nvd.nist.gov/vuln/detail/CVE-2022-39384","https://github.com/advisories/GHSA-9c22-pwxw-p6hx"],"source_kind":"github","identifiers":["GHSA-9c22-pwxw-p6hx","CVE-2022-39384"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:40.638Z","updated_at":"2026-06-19T03:10:34.299Z","epss_percentage":0.00587,"epss_percentile":0.69515,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05YzIyLXB3eHctcDZoeM0bQg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05YzIyLXB3eHctcDZoeM0bQg","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.4.1","vulnerable_version_range":"\u003e= 3.2.0, \u003c 4.4.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable","statistics":{"dependent_packages_count":853,"dependent_repos_count":4919,"downloads":1134090,"downloads_period":"last-month"},"affected_versions":["3.2.0","3.2.2-solc-0.7","3.3.0","3.3.0-solc-0.7","3.4.0","3.4.0-rc.0","3.4.0-solc-0.7","3.4.0-solc-0.7-2","3.4.1","3.4.1-solc-0.7","3.4.1-solc-0.7-2","3.4.2","3.4.2-solc-0.7","4.0.0","4.0.0-beta.0","4.0.0-rc.0","4.1.0","4.1.0-rc.0","4.2.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.1"],"unaffected_versions":["4.4.1","4.4.2","4.5.0","4.5.1","4.5.2","4.6.0","4.7.0","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.6.1"]},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.4.1","vulnerable_version_range":"\u003e= 3.2.0, \u003c 4.4.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["3.2.0","3.2.1-solc-0.7","3.2.2-solc-0.7","3.3.0","3.3.0-rc.0","3.3.0-rc.1","3.3.0-rc.2","3.3.0-solc-0.7","3.4.0","3.4.0-rc.0","3.4.0-solc-0.7","3.4.1","3.4.1-solc-0.7","3.4.1-solc-0.7-2","3.4.2","3.4.2-solc-0.7","4.0.0","4.0.0-beta.0","4.0.0-beta.1","4.0.0-rc.0","4.1.0","4.1.0-rc.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.4.0","4.4.0-rc.0","4.4.0-rc.1"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","4.4.1","4.4.2","4.5.0","4.6.0","4.7.0","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05YzIyLXB3eHctcDZoeM0bQg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13bXB2LWMyanAtajJ4Z80XOg","url":"https://github.com/advisories/GHSA-wmpv-c2jp-j2xg","title":"ERC1155Supply vulnerability in OpenZeppelin Contracts","description":"When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the `ERC1155Supply` extension, total supply is not updated until after the callback, thus during the callback the reported total supply is lower than the real number of tokens in circulation.\n\n### Impact\nIf a system relies on accurately reported supply, an attacker may be able to mint tokens and invoke that system after receiving the token balance but before the supply is updated.\n\n### Patches\nA fix is included in version 4.3.3 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`.\n\n### Workarounds\nIf accurate supply is relevant, do not mint tokens to untrusted receivers.\n\n### Credits\nThe issue was identified and reported by @ChainSecurityAudits.\n\n### For more information\nRead [TotalSupply Inconsistency in ERC1155 NFT Tokens](https://medium.com/chainsecurity/totalsupply-inconsistency-in-erc1155-nft-tokens-8f8e3b29f5aa) by @ChainSecurityAudits for a more detailed breakdown.\n\nIf you have any questions or comments about this advisory, email us at security@openzeppelin.com.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2021-11-15T23:28:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-wmpv-c2jp-j2xg","https://github.com/advisories/GHSA-wmpv-c2jp-j2xg"],"source_kind":"github","identifiers":["GHSA-wmpv-c2jp-j2xg"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:42.546Z","updated_at":"2026-05-04T17:10:22.198Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13bXB2LWMyanAtajJ4Z80XOg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13bXB2LWMyanAtajJ4Z80XOg","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts-upgradeable","versions":[{"first_patched_version":"4.3.3","vulnerable_version_range":"\u003e= 4.2.0, \u003c 4.3.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts-upgradeable"},{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.3.3","vulnerable_version_range":"\u003e= 4.2.0, \u003c 4.3.3"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13bXB2LWMyanAtajJ4Z80XOg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01dnAzLXY0aGMtZ3g3Ns0VxA","url":"https://github.com/advisories/GHSA-5vp3-v4hc-gx76","title":"UUPSUpgradeable vulnerability in @openzeppelin/contracts","description":"### Impact\n\nUpgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. We will update this advisory with more information soon.\n\n### Patches\n\nA fix is included in version 4.3.2 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`.\n\n### Workarounds\n\nInitialize implementation contracts using `UUPSUpgradeable` by invoking the initializer function (usually called `initialize`). An example is provided [in the forum](https://forum.openzeppelin.com/t/security-advisory-initialize-uups-implementation-contracts/15301).\n\n### References\n\n[Post-mortem](https://forum.openzeppelin.com/t/uupsupgradeable-vulnerability-post-mortem/15680).\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance executing the mitigation, email us at security@openzeppelin.com.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-09-15T20:23:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-5vp3-v4hc-gx76","https://nvd.nist.gov/vuln/detail/CVE-2021-41264","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/024cc50df478d2e8f78539819749e94d6df60592","https://forum.openzeppelin.com/t/security-advisory-initialize-uups-implementation-contracts/15301","https://github.com/advisories/GHSA-5vp3-v4hc-gx76"],"source_kind":"github","identifiers":["GHSA-5vp3-v4hc-gx76","CVE-2021-41264"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:00.013Z","updated_at":"2026-06-19T03:10:44.022Z","epss_percentage":0.00641,"epss_percentile":0.70509,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dnAzLXY0aGMtZ3g3Ns0VxA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01dnAzLXY0aGMtZ3g3Ns0VxA","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"4.3.2","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.3.2"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["4.1.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0","4.3.1"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.3.0","3.4.0","3.4.1","3.4.2","4.0.0","4.3.2","4.3.3","4.4.0","4.4.1","4.4.2","4.5.0","4.6.0","4.7.0","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dnAzLXY0aGMtZ3g3Ns0VxA/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnNDctM2MyeC1tMndy","url":"https://github.com/advisories/GHSA-fg47-3c2x-m2wr","title":"TimelockController vulnerability in OpenZeppelin Contracts ","description":"### Impact\n\nA vulnerability in `TimelockController` allowed an actor with the executor role to take immediate control of the timelock, by resetting the delay to 0 and escalating privileges, thus gaining unrestricted access to assets held in the contract. Instances with the executor role set to \"open\" allow anyone to use the executor role, thus leaving the timelock at risk of being taken over by an attacker.\n\n### Patches\n\nA fix is included in the following releases of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`:\n- 4.3.1\n- 3.4.2\n- 3.4.2-solc-0.7\n\nDeployed instances of `TimelockController` should be replaced with a fixed version by migrating all assets, ownership, and roles.\n\n### Workarounds\n\nRevoke the executor role from accounts not strictly under the team's control. We recommend revoking all executors that are not also proposers. When applying this mitigation, ensure there is at least one proposer and executor remaining.\n\n### References\n\n[Post-mortem](https://forum.openzeppelin.com/t/timelockcontroller-vulnerability-postmortem/14958).\n\n### Credits\n\nThe issue was identified by an anonymous white hat hacker through [Immunefi](https://immunefi.com/).\n\n### For more information\n\nIf you have any questions or comments about this advisory, or need assistance executing the mitigation, email us at security@openzeppelin.com.\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-08-30T16:12:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-fg47-3c2x-m2wr","https://nvd.nist.gov/vuln/detail/CVE-2021-39167","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/cec4f2ef57495d8b1742d62846da212515d99dd5","https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md#431","https://github.com/advisories/GHSA-fg47-3c2x-m2wr"],"source_kind":"github","identifiers":["GHSA-fg47-3c2x-m2wr","CVE-2021-39167"],"repository_url":"https://github.com/OpenZeppelin/openzeppelin-contracts","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.669Z","updated_at":"2026-06-19T03:10:46.161Z","epss_percentage":0.00443,"epss_percentile":0.63566,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnNDctM2MyeC1tMndy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnNDctM2MyeC1tMndy","packages":[{"ecosystem":"npm","package_name":"@openzeppelin/contracts","versions":[{"first_patched_version":"3.4.2","vulnerable_version_range":"\u003e= 3.3.0, \u003c 3.4.2"},{"first_patched_version":"4.3.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.3.1"}],"purl":"pkg:npm/%40openzeppelin%2Fcontracts","statistics":{"dependent_packages_count":3207,"dependent_repos_count":34743,"downloads":2595452,"downloads_period":"last-month"},"affected_versions":["3.3.0","3.4.0","3.4.0-rc.0","3.4.0-solc-0.7","3.4.1","3.4.1-solc-0.7","3.4.1-solc-0.7-2","3.4.2-solc-0.7","4.0.0","4.1.0","4.1.0-rc.0","4.2.0","4.2.0-rc.0","4.3.0","4.3.0-rc.0"],"unaffected_versions":["2.3.0","2.4.0","2.5.0","2.5.1","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.4.2","4.3.1","4.3.2","4.3.3","4.4.0","4.4.1","4.4.2","4.5.0","4.6.0","4.7.0","4.7.1","4.7.2","4.7.3","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4","4.9.5","4.9.6","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.4.0","5.5.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnNDctM2MyeC1tMndy/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@openzeppelin/contracts","docker_dependents_count":134,"docker_downloads_count":275000,"usage_url":"https://repos.ecosyste.ms/usage/npm/@openzeppelin/contracts","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@openzeppelin/contracts/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-09-07T02:07:16.652Z","issues_count":388,"pull_requests_count":841,"avg_time_to_close_issue":10048973.82051282,"avg_time_to_close_pull_request":2135030.595774648,"issues_closed_count":195,"pull_requests_closed_count":710,"pull_request_authors_count":133,"issue_authors_count":191,"avg_comments_per_issue":3.347938144329897,"avg_comments_per_pull_request":2.6967895362663494,"merged_pull_requests_count":524,"bot_issues_count":1,"bot_pull_requests_count":131,"past_year_issues_count":235,"past_year_pull_requests_count":535,"past_year_avg_time_to_close_issue":1697534.7610619469,"past_year_avg_time_to_close_pull_request":809443.8926174496,"past_year_issues_closed_count":113,"past_year_pull_requests_closed_count":447,"past_year_pull_request_authors_count":94,"past_year_issue_authors_count":119,"past_year_avg_comments_per_issue":2.008510638297872,"past_year_avg_comments_per_pull_request":2.439252336448598,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":100,"past_year_merged_pull_requests_count":325,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenZeppelin%2Fopenzeppelin-contracts/issues","maintainers":[{"login":"Amxx","count":292,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Amxx"},{"login":"ernestognw","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ernestognw"},{"login":"frangio","count":80,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/frangio"},{"login":"ericglau","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ericglau"},{"login":"ericnordelo","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ericnordelo"},{"login":"CallMeGwei","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/CallMeGwei"},{"login":"xdaluca","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xdaluca"}],"active_maintainers":[{"login":"Amxx","count":169,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Amxx"},{"login":"ernestognw","count":100,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ernestognw"},{"login":"frangio","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/frangio"},{"login":"ericglau","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ericglau"},{"login":"ericnordelo","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ericnordelo"},{"login":"xdaluca","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xdaluca"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@openzeppelin%2Fcontracts/codemeta","maintainers":[{"uuid":"ericglau","login":"ericglau","name":null,"email":"ericglau@outlook.com","url":null,"packages_count":78,"html_url":"https://www.npmjs.com/~ericglau","role":null,"created_at":"2022-11-10T10:55:38.908Z","updated_at":"2022-11-10T10:55:38.908Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ericglau/packages"},{"uuid":"frangio","login":"frangio","name":null,"email":"frangio.1@gmail.com","url":null,"packages_count":133,"html_url":"https://www.npmjs.com/~frangio","role":null,"created_at":"2022-11-10T10:55:38.911Z","updated_at":"2022-11-10T10:55:38.911Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/frangio/packages"},{"uuid":"amxx","login":"amxx","name":null,"email":"hadrien.croubois@gmail.com","url":null,"packages_count":53,"html_url":"https://www.npmjs.com/~amxx","role":null,"created_at":"2022-11-10T10:55:38.913Z","updated_at":"2022-11-10T10:55:38.913Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/amxx/packages"},{"uuid":"ernestognw","login":"ernestognw","name":null,"email":"ernesto@openzeppelin.com","url":null,"packages_count":45,"html_url":"https://www.npmjs.com/~ernestognw","role":null,"created_at":"2023-09-20T04:35:41.790Z","updated_at":"2023-09-20T04:35:41.790Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ernestognw/packages"},{"uuid":"arr00","login":"arr00","name":null,"email":"arr00comp@gmail.com","url":null,"packages_count":42,"html_url":"https://www.npmjs.com/~arr00","role":null,"created_at":"2026-02-11T13:30:16.253Z","updated_at":"2026-02-11T13:30:16.253Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/arr00/packages"},{"uuid":"luiz-lvj","login":"luiz-lvj","name":null,"email":"luiz.vasconcelos@openzeppelin.com","url":null,"packages_count":24,"html_url":"https://www.npmjs.com/~luiz-lvj","role":null,"created_at":"2026-02-11T13:30:17.023Z","updated_at":"2026-02-11T13:30:17.023Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/luiz-lvj/packages"},{"uuid":"son-oz","login":"son-oz","name":null,"email":"son.dinh@openzeppelin.com","url":null,"packages_count":130,"html_url":"https://www.npmjs.com/~son-oz","role":null,"created_at":"2026-02-11T13:30:18.278Z","updated_at":"2026-02-11T13:30:18.278Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/son-oz/packages"}]}