Go/cosmossdk.io/x/tx: high
ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion
Action: Upgrade cosmossdk.io/x/tx to 0.13.7 or later.
go get cosmossdk.io/x/tx@v0.13.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.7 | - |
Fixed versions
| 0.13.7 |
Sources
- osv: GHSA-8wcc-m6j2-qxvm#Go/cosmossdk.io/x/tx
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm
- https://github.com/cosmos/cosmos-sdk/commit/c6b1bdcd5628e3e425a3f02881d3c7db1d7af653
- https://github.com/cosmos/cosmos-sdk
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.11
published · modified · JSON