HIGH8.8npm
GHSA-4x76-22x2-rx8v· CVE-2026-48054OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
Modified: 9/10/2026
package
npm/@openzeppelin/wizard
pkg:npm/%40openzeppelin/wizard
LOW3.3npm
GHSA-9wxg-vf3r-56hc· CVE-2026-57583OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source
Modified: 9/15/2026