Go/github.com/CosmWasm/wasmvm/v2: medium
Panic in wasmvm can slow down block production
Action: Upgrade github.com/CosmWasm/wasmvm/v2 to 2.0.4 or later.
go get github.com/CosmWasm/wasmvm/v2@v2.1.3go get github.com/CosmWasm/wasmvm/v2@v2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.3 | - |
| 2.0.0 | 2.0.4 | - |
Fixed versions
| 2.1.3 | 2.0.4 |
Sources
- osv: GHSA-vmqh-5232-v43r
- https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-vmqh-5232-v43r
- https://github.com/CosmWasm/cosmwasm/commit/108e7dcbf9c21df0fa83f355ad3a7355d7f220cb
- https://github.com/CosmWasm/cosmwasm/commit/edcdbc520d4f5521eed42de6e2869658278e91fd
- https://github.com/CosmWasm/cosmwasm/commit/f63429ca59eb44dd5d780c1572016581337091e4
- https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-008.md
- https://github.com/CosmWasm/wasmvm
published · modified · JSON