DevSecOps@openzeppelin/contracts-upgradeable - high issue in >=4.3.0,<4.7.2 - CVE-2022-31198
Description
Package @openzeppelin/contracts-upgradeable which comes from package manager npm is found vulnerable with high severity, please avoid version >=4.3.0,<4.7.2 in order to mitigate.
Recommended Actions
Avoid using versions >=4.3.0,<4.7.2 for package @openzeppelin/contracts-upgradeable
Coverage
FortiDevSec 24.3 or later
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-09-30 | 24.30000 |
New
|
None |
| ID | 18308 |
| CVE ID | |
| CWE ID |
CWE-682 |
| OWASP | |
| Package Source | npm |
| Affected Language | Node |
| Date | Feb 16, 2024 |
| Risk |
|