https://vulnerability.circl.lu/sightings/feed 2026-08-08T05:49:26.151004+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/73f57395-319d-4256-9407-7029e97c8090/export 2026-08-08T05:49:26.177116+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "73f57395-319d-4256-9407-7029e97c8090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41264", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/32321", "content": "\u203c CVE-2021-41264 \u203c\n\nOpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`. For users unable to upgrade; initialize implementation contracts using `UUPSUpgradeable` by invoking the initializer function (usually called `initialize`). An example is provided [in the forum](https://forum.openzeppelin.com/t/security-advisory-initialize-uups-implementation-contracts/15301).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-12T20:39:05.000000Z"} 2021-11-12T20:39:05+00:00