CVE:CVE-2023-26488
CNNVD:CNNVD-202303-227
OpenZeppelin是一个应用软件。一个安全区块链应用的标准。
OpenZeppelin Contracts存在安全漏洞，该漏洞源于在传输过程中金额会溢出。
solution:Upgrade openzeppelin contracts to a higher version than 4.8.2,and avoid the version [4.8.0,4.8.2); Upgrade openzeppelin contracts_upgradeable to a higher version than 4.8.2,and avoid the version [4.8.0,4.8.2)