[Snyk] Upgrade @openzeppelin/contracts from 4.1.0 to 4.9.6 #7
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @openzeppelin/contracts from 4.1.0 to 4.9.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 37 versions ahead of your current version.
The recommended version was released on 6 months ago.
Issues fixed by the recommended upgrade:
SNYK-JS-OPENZEPPELINCONTRACTS-6056529
SNYK-JS-OPENZEPPELINCONTRACTS-1570170
SNYK-JS-OPENZEPPELINCONTRACTS-1585627
SNYK-JS-OPENZEPPELINCONTRACTS-1920946
SNYK-JS-OPENZEPPELINCONTRACTS-2320176
SNYK-JS-OPENZEPPELINCONTRACTS-2958047
SNYK-JS-OPENZEPPELINCONTRACTS-2958050
SNYK-JS-OPENZEPPELINCONTRACTS-2980279
SNYK-JS-OPENZEPPELINCONTRACTS-2965798
SNYK-JS-OPENZEPPELINCONTRACTS-5838352
SNYK-JS-OPENZEPPELINCONTRACTS-5425827
Release notes
Package name: @openzeppelin/contracts
Base64
: Fix issue where dirty memory located just after the input buffer is affecting the result. (#4929)Multicall
: Make aware of non-canonical context (i.e.msg.sender
is not_msgSender()
), allowing compatibility withERC2771Context
. Patch duplicatedAddress.functionDelegateCall
in v4.9.4 (removed).ERC2771Context
andContext
: Introduce a_contextPrefixLength()
getter, used to trim extra information appended tomsg.data
.Multicall
: Make aware of non-canonical context (i.e.msg.sender
is not_msgSender()
), allowing compatibility withERC2771Context
.ERC2771Context
: Return the forwarder address whenever themsg.data
of a call originating from a trusted forwarder is not long enough to contain the request signer address (i.e.msg.data.length
is less than 20 bytes), as specified by ERC-2771. (#4481)ERC2771Context
: Prevent revert in_msgData()
when a call originating from a trusted forwarder is not long enough to contain the request signer address (i.e.msg.data.length
is less than 20 bytes). Return the full calldata in that case. (#4484)Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: