openzeppelin/contracts-wizard Security Advisories | GitStock

low2026-06-19

OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source

GHSA-9wxg-vf3r-56hc

high2026-06-11

OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

GHSA-4x76-22x2-rx8v · CVE-2026-48054