Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,151All CVEsplus 19,119 rejected
- 489Last 24 hours2,789 in the last 7 days
- 16,900Last 30 days1,554 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 1 | 1 | 0 | 3 | 25 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 22 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 21 |
| 2023 | 0 | 0 | 8 | 0 | 0 | 8 | 19 |
| 2022 | 0 | 4 | 4 | 0 | 0 | 8 | 11 |
| 2021 | 3 | 0 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-57583 | OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated sourceOpenZeppelin · contracts-wizard | Low3.3 |
| CVE-2026-73645 | OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.OpenZeppelin · openzeppelin-confidential-contracts | Medium6.6 |
| CVE-2026-48054 | OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uriOpenZeppelin · contracts-wizard | High8.8 |
| CVE-2025-54070 | OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffersOpenZeppelin · openzeppelin-contracts | Medium6.9 |
| CVE-2024-45304 | OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contractsOpenZeppelin · cairo-contracts | Medium5.3 |
| CVE-2024-27094 | OpenZeppelin Contracts base64 encoding may read from potentially dirty memoryOpenZeppelin · openzeppelin-contracts | Medium6.5 |
| CVE-2023-49798 | Duplicated execution of subcalls in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts | Medium5.9 |
| CVE-2023-40014 | OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSenderOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2023-34459 | OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific treesOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2023-34234 | Governor proposal creation may be blocked by frontrunning in OpenZeppelinOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2023-30541 | TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contractsOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2023-30542 | GovernorCompatibilityBravo may trim proposal calldataOpenZeppelin · openzeppelin-contracts | Medium6.8 |
| CVE-2023-26488 | OpenZeppelin Contracts contains Incorrect CalculationOpenZeppelin · openzeppelin-contracts | Medium6.5 |
| CVE-2023-23940 | OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypassOpenZeppelin · cairo-contracts | Medium6.4 |
| CVE-2022-39384 | OpenZeppelin Contracts initializer reentrancy may lead to double initializationOpenZeppelin · openzeppelin-contracts | Medium5.6 |
| CVE-2022-35961 | ECDSA signature malleability in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts | High7.9 |
| CVE-2022-35915 | Unbounded gas consumption in @openzeppelin/contractsOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2022-35916 | Cross chain utilities for Arbitrum L2 see EOA calls as cross chain callsOpenZeppelin · openzeppelin-contracts | Medium5.3 |
| CVE-2022-31198 | GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contractsOpenZeppelin · openzeppelin-contracts | High7.5 |
| CVE-2022-31170 | OpenZeppelin Contracts's ERC165Checker may revert instead of returning falseOpenZeppelin · openzeppelin-contracts | High7.5 |
| CVE-2022-31172 | OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signersOpenZeppelin · openzeppelin-contracts | High7.5 |
| CVE-2022-31153 | OpenZeppelin Contracts for Cairo account cannot process transactions on GoerliOpenZeppelin · cairo-contracts | Medium6.5 |
| CVE-2021-41264 | UUPSUpgradeable vulnerability in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts | Critical9.8 |
| CVE-2021-39167 | TimelockController vulnerability in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts | Critical10.0 |
| CVE-2021-39168 | TimelockController vulnerability in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts-upgradeable | Critical10.0 |