Vendor
The OpenZeppelin confidential-contracts library is vulnerable to private data leakage due to improper validation of encrypted handles returned by untrusted ERC-7984 tokens and recipients.