Go/github.com/cosmos/cosmos-sdk: high 7.1
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
Action: Upgrade github.com/cosmos/cosmos-sdk to 0.50.5 or later.
go get github.com/cosmos/cosmos-sdk@v0.50.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.50.0 | 0.50.5 | - |
Fixed versions
| 0.50.5 |
Sources
- osv: GHSA-95rx-m9m5-m94v
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-95rx-m9m5-m94v
- https://github.com/cosmos/cosmos-sdk/commit/4467110df40797ebe916c23ebfd45c9ee7583897
- https://github.com/cosmos/cosmos-sdk
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.5
published · modified · JSON