Go/github.com/cosmos/cosmos-sdk: high
ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion
Action: Upgrade github.com/cosmos/cosmos-sdk to 0.47.15 or later.
go get github.com/cosmos/cosmos-sdk@v0.50.11go get github.com/cosmos/cosmos-sdk@v0.47.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.50.0-alpha.0 | 0.50.11 | - |
| 0 | 0.47.15 | - |
Fixed versions
| 0.50.11 | 0.47.15 |
Sources
- osv: GHSA-8wcc-m6j2-qxvm
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm
- https://github.com/cosmos/cosmos-sdk/commit/c6b1bdcd5628e3e425a3f02881d3c7db1d7af653
- https://github.com/cosmos/cosmos-sdk
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.11
published · modified · JSON