Go/github.com/babylonlabs-io/babylon: high

Babylon Finality Provider `MsgCommitPubRandList` replay attack

Action: Upgrade github.com/babylonlabs-io/babylon to 1.1.0 or later.

go get github.com/babylonlabs-io/babylon@v1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-7mm3-vfg8-7rg6
• https://github.com/babylonlabs-io/babylon/security/advisories/GHSA-7mm3-vfg8-7rg6
• https://github.com/babylonlabs-io/babylon/commit/cb5d0ecae5cebc116d09296baaed25f715f904df
• https://github.com/babylonlabs-io/babylon
• https://pkg.go.dev/vuln/GO-2025-3686

published 2025-05-15T14:05:32Z · modified 2025-07-31T16:43:43Z · JSON