@centrifuge/ethereum-contracts (>=0.2.7 <=1.0.3-canary.4), curve-bonded-tokens (>=0.1.4 <=0.1.8) potentially affected by CVE-2022-35915 via openzeppelin-eth (>=2.1.3 <=2.2.0)

openzeppelin-eth NPM version =2.1.3, =0.2.7, =0.1.4, =0.1.8 Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...