OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
High severity
GitHub Reviewed
Published
May 20, 2026
in
OpenZeppelin/contracts-wizard
•
Updated Jun 11, 2026
Give feedback on Dependabot alerts