[SMRT] Bump the @openzeppelin dependencies to address security advisories

[jaybuidl]

Description

The latest version @chainlink/[email protected] depends on vulnerable versions of the OpenZeppelin contracts which can be upgraded to the v4 to address the vulnerabilities.

NPM resolutions:

  "resolutions": {
    "@openzeppelin/contracts@npm:4.5.0": "npm:4.9.6",
    "@openzeppelin/contracts@npm:4.7.3": "npm:4.9.6",
    "@openzeppelin/contracts@npm:4.8.3": "npm:4.9.6",
    "@openzeppelin/contracts@npm:4.9.3": "npm:4.9.6",
    "@openzeppelin/contracts-upgradeable@npm:4.5.2": "npm:4.9.6",
    "@openzeppelin/contracts-upgradeable@npm:4.7.3": "npm:4.9.6",
    "@openzeppelin/contracts-upgradeable@npm:4.8.3": "npm:4.9.6",
    "@openzeppelin/contracts-upgradeable@npm:4.9.3": "npm:4.9.6"
  },

Steps to Reproduce

Deps.dev

source

Dependencies Review Report

Name	Version	Vulnerability	Severity
@openzeppelin/contracts	4.5.0	OpenZeppelin Contracts's ERC165Checker may revert instead of returning false	high
		OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers	high
		OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals	high
		OpenZeppelin Contracts vulnerable to ECDSA signature malleability	high
		GovernorCompatibilityBravo may trim proposal calldata	high
		OpenZeppelin Contracts ERC165Checker unbounded gas consumption	moderate
		OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated	moderate
		OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts	4.7.3	GovernorCompatibilityBravo may trim proposal calldata	high
		OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated	moderate
		OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts-upgradeable	4.5.2	OpenZeppelin Contracts's ERC165Checker may revert instead of returning false	high
		OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers	high
		OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals	high
		OpenZeppelin Contracts vulnerable to ECDSA signature malleability	high
		GovernorCompatibilityBravo may trim proposal calldata	high
		OpenZeppelin Contracts ERC165Checker unbounded gas consumption	moderate
		OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated	moderate
		OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts-upgradeable	4.7.3	GovernorCompatibilityBravo may trim proposal calldata	high
		OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated	moderate
		OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts	4.8.3	OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts-upgradeable	4.8.3	OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning	moderate
		OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees	moderate
		OpenZeppelin Contracts vulnerable to Improper Escaping of Output	moderate
		OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts	4.9.3	OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low
@openzeppelin/contracts-upgradeable	4.9.3	OpenZeppelin Contracts base64 encoding may read from potentially dirty memory	low