npm Alert
2532Warning Date
Severity Level
Warning Number
Target Sector
24 July, 2022
● High
2022-5058
All
npm has released security update to address a vulnerability in the following product:
- OpenZeppelin Contracts's SignatureChecker
Attacker could exploit this vulnerability by doing the following:
- Bypass of a protection mechanism
The CERT team encourages users to review npm security advisory and apply the necessary updates: