crates.io/cosmwasm-vm: medium
Panic in wasmvm can slow down block production
Action: Upgrade cosmwasm-vm to 1.5.8 or later.
cargo update -p cosmwasm-vm --precise 2.1.4cargo update -p cosmwasm-vm --precise 2.0.7cargo update -p cosmwasm-vm --precise 1.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.4 | - |
| 2.0.0 | 2.0.7 | - |
| 0 | 1.5.8 | - |
Fixed versions
| 2.1.4 | 2.0.7 | 1.5.8 |
Sources
- osv: GHSA-vmqh-5232-v43r#crates.io/cosmwasm-vm
- https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-vmqh-5232-v43r
- https://github.com/CosmWasm/cosmwasm/commit/108e7dcbf9c21df0fa83f355ad3a7355d7f220cb
- https://github.com/CosmWasm/cosmwasm/commit/edcdbc520d4f5521eed42de6e2869658278e91fd
- https://github.com/CosmWasm/cosmwasm/commit/f63429ca59eb44dd5d780c1572016581337091e4
- https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-008.md
- https://github.com/CosmWasm/wasmvm
published · modified · JSON