| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| contracts | ≥ 4.1.0, < 4.3.2 | 4.3.2 |
| @openzeppelin/contracts | ≥ 4.1.0, < 4.3.2 | 4.3.2 |
| @openzeppelin/contracts-upgradeable | ≥ 4.1.0, < 4.3.2 | 4.3.2 |
Upgradeable contracts using UUPSUpgradeable may be vulnerable to an attack affecting uninitialized implementation contracts. We will update this advisory with more information soon.
A fix is included in version 4.3.2 of @openzeppelin/contracts and @openzeppelin/contracts-upgradeable.
Initialize implementation contracts using UUPSUpgradeable by invoking the initializer function (usually called initialize). An example is provided in the forum.
If you have any questions or comments about this advisory, or need assistance executing the mitigation, email us at [email protected].
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí