Go/github.com/CosmWasm/wasmvm/v2: medium 4.3
Gas mispricing in cosmwasm-vm
Action: Upgrade github.com/CosmWasm/wasmvm/v2 to 2.0.3 or later.
go get github.com/CosmWasm/wasmvm/v2@v2.1.2go get github.com/CosmWasm/wasmvm/v2@v2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.2 | - |
| 2.0.0 | 2.0.3 | - |
Fixed versions
| 2.1.2 | 2.0.3 |
Sources
- osv: GHSA-rg2q-2jh9-447q#Go/github.com/CosmWasm/wasmvm/v2
- https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-rg2q-2jh9-447q
- https://github.com/CosmWasm/cosmwasm/commit/5bef1c588933bd60a04bb70099150cf84b69e144
- https://github.com/CosmWasm/cosmwasm/commit/9b4d6d03772b75d500a7d3c972d0d8ba6d085c06
- https://github.com/CosmWasm/cosmwasm/commit/c1313afeb261e17b1c8cf6a1eacee1da0dac42ae
- https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-004.md
- https://github.com/CosmWasm/wasmvm
- https://rustsec.org/advisories/RUSTSEC-2024-0361.html
published · modified · JSON