MED: HolographOperator.sol 's resetOperator() function allows malicious or hacked admin to permanently freeze operator's bonded tokens.

Lines of code Vulnerability details Description In HolographOperator, the following function is implemented: function resetOperator uint256 blockTime, uint256 baseBondAmount, uint256 podMultiplier, uint256 operatorThreshold, uint256 operatorThresholdStep, uint256 operatorThresholdDivisor external...

@centrifuge/ethereum-contracts (>=0.2.7 <=1.0.3-canary.4), curve-bonded-tokens (>=0.1.4 <=0.1.8) potentially affected by CVE-2022-35915 via openzeppelin-eth (>=2.1.3 <=2.2.0)

openzeppelin-eth NPM version =2.1.3, =0.2.7, =0.1.4, =0.1.8 Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...