Shared-library version with known-vuln status

Raydium's assessment for RD-F-135 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

anchor-lang =0.32.1: No published RustSec/GHSA advisory found. 0.32.1 is the current patch release (race condition fix from 0.32.0). solana-program =2.1.0: current stable SDK, no known high-severity advisory. spl-token =7.0.0: current, no advisory. serum_dex 0.5.10 from raydium-io/openbook-dex fork: no GHSA advisory.

Sources #

URL
RustSec — no high/critical advisory for anchor 0.32.1 or solana-program 2.1.0RustSec advisory databaseretrieved 2026-04-29
URL
Anchor 0.32.1 release notes (race condition fix, no CVE)anchor-lang 0.32.1 release notesretrieved 2026-04-29

Methodology #

Identify the version of key shared libraries (OZ, Solady, Solmate) used and check against CVE/GHSA databases for any active advisory.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol raydium factor RD-F-135 score green collected_at 2026-04-29 12:31:55