CVE-2026-48054
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.8 / 10
Vulnerability Description
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
npm
Product
@openzeppelin/wizard
External References
- https://github.com/OpenZeppelin/contracts-wizard/security/advisories/GHSA-4x76-22x2-rx8v
- https://github.com/OpenZeppelin/contracts-wizard/commit/ec12c44f8d9e0491eba31037f95b36e98ec58b5f
- https://github.com/OpenZeppelin/contracts-wizard/releases/tag/%40openzeppelin%2Fwizard%400.10.9
- https://github.com/advisories/GHSA-4x76-22x2-rx8v
Discussion (0)
Add Comment
No comments yet. Be the first!