The package.json configuration file says that the project is using OZ which has a not last update version.
Latest non vulnerable version 4.9.3
for @openzeppelin/contracts and @openzeppelin/contracts-upgradeable.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.