@openzeppelin contracts-wizard

• CVE-2026-57583 Low 3.3 OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source 0.2%
• CVE-2026-48054 High 8.8 OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri 0.6%