Go/cosmossdk.io/math: high
ASA-2024-010: cosmossdk.io/math: Mismatched bit-length validation in sdk.Int and sdk.Dec can lead to panic
Action: Upgrade cosmossdk.io/math to 1.4.0 or later.
go get cosmossdk.io/math@v1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: GHSA-7225-m954-23v7
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-7225-m954-23v7
- https://github.com/cosmos/cosmos-sdk/commit/c6522a72a45c34897f9fc85d438c0b74d52f8862
- https://github.com/cosmos/cosmos-sdk
- https://pkg.go.dev/vuln/GO-2024-3279
published · modified · JSON