CVE-2021-39167

Critical

Advisory

Published 30 Aug 2021In the index since 8 Sept 2026

TimelockController vulnerability in OpenZeppelin Contracts

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
@openzeppelin/contractsnpm	3.4.1, 3.4.1-solc-0.7-2	3.4.2	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2021-39167.

Container image	Digest	Package	Fixed in
ethersphere/bzz-token-service :latest	7624f11a72ad	@openzeppelin/contracts@3.4.1	3.4.2

3,260

dtlinfradao

1 of the 1 container images this version deploys carry CVE-2021-39167.

Container image	Digest	Package	Fixed in
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	@openzeppelin/contracts@3.4.1-solc-0.7-2	3.4.2

4,944

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	@openzeppelin/contracts@3.4.1-solc-0.7-2	3.4.2	1
ethersphere/bzz-token-service :latest	7624f11a72ad	@openzeppelin/contracts@3.4.1	3.4.2	1