Submitted by hubble, also found by antonttc, csanuragjain, gs8nrv, rayn, reassor, and TrungOre
RoleManager.sol#L43-L46
RoleManager.sol#L115-L128
The impact of this vulnerability, i.e.,  losing all governance control is very High.
There is a possibility, due to a corner case as described below.
Contract : RoleManager.sol
Function : renounceGovernance()
getRoleMemberCount() currently returns _roleMembers[role].length();
It should return the count only for _roles[role].members[account] = true;
Its recommended to add a new function to know who are the active members for any role,
like getRoleMembers(bytes32 role) returning address account.
chase-manning (Backd) confirmed
gzeon (judge) decreased severity to Medium
