Go/github.com/CosmWasm/wasmvm: medium 4.3

Gas mispricing in cosmwasm-vm

Action: Upgrade github.com/CosmWasm/wasmvm to 1.5.4 or later.

go get github.com/CosmWasm/wasmvm@v1.5.4

Affected

Fixed versions

Sources

• osv: GHSA-rg2q-2jh9-447q#Go/github.com/CosmWasm/wasmvm
• https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-rg2q-2jh9-447q
• https://github.com/CosmWasm/cosmwasm/commit/5bef1c588933bd60a04bb70099150cf84b69e144
• https://github.com/CosmWasm/cosmwasm/commit/9b4d6d03772b75d500a7d3c972d0d8ba6d085c06
• https://github.com/CosmWasm/cosmwasm/commit/c1313afeb261e17b1c8cf6a1eacee1da0dac42ae
• https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-004.md
• https://github.com/CosmWasm/wasmvm
• https://rustsec.org/advisories/RUSTSEC-2024-0361.html

published 2024-08-08T16:30:50Z · modified 2024-08-08T17:03:07Z · JSON