Vulnerable GovernorVotesQuorumFraction version
The protocol uses an OZ version of contracts that contain a known vulnerability in government contracts.\\n`UXDGovernor` contract inherits from GovernorVotesQuorumFraction:\\n```\\n contract UXDGovernor is\\n    ReentrancyGuard,\\n    Governor,\\n    GovernorVotes,\\n    GovernorVotesQuorumFraction,\\n    GovernorTimelockControl,\\n    GovernorCountingSimple,\\n    GovernorSettings\\n```\\n\\nIt was patched in version 4.7.2, but this protocol uses an older version: "@openzeppelin/contracts": "^4.6.0"
Update the OZ version of contracts to version >=4.7.2 or at least follow the workarounds of OZ if not possible otherwise.
The potential impact is described in the OZ advisory. This issue was assigned with a severity of High from OZ, so I am sticking with it in this submission.
```\\n contract UXDGovernor is\\n    ReentrancyGuard,\\n    Governor,\\n    GovernorVotes,\\n    GovernorVotesQuorumFraction,\\n    GovernorTimelockControl,\\n    GovernorCountingSimple,\\n    GovernorSettings\\n```\\n