Shared-library version with known-vuln status

Evidence summary #

OZ 4.9.3: GHSA-g4vp-m682-qqmp (ERC2771Context) was PATCHED IN 4.9.3 — this version is the fix. OZ 4.9.4 introduced GHSA-699g-q6qh-q4v8 (Multicall double-execute) but Pendle is on 4.9.3 (unaffected). No high/critical active GHSA advisory for OZ 4.9.3 as used by Pendle.

Sources #

Methodology #

Identify the version of key shared libraries (OZ, Solady, Solmate) used and check against CVE/GHSA databases for any active advisory.

See the full factor methodology and distribution across all protocols →