Go/github.com/cosmos/ibc-go/v4: critical 9.1

ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks

Action: Upgrade github.com/cosmos/ibc-go/v4 to 4.6.0 or later.

go get github.com/cosmos/ibc-go/v4@v4.6.0

Affected

Fixed versions

Sources

• osv: GHSA-j496-crgh-34mx
• https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx
• https://github.com/cosmos/ibc-go/commit/04275aa77644dec97fb91b749d963c992591b7f7
• https://github.com/cosmos/ibc-go/commit/278fa89f192af04af32d82fd5ef41f84f82edd97
• https://github.com/cosmos/ibc-go/commit/5e2e9ebc2f67df324028dd36a1837ffcc8e6b0dd
• https://github.com/cosmos/ibc-go/commit/a0185df3953070ba5ebcb66735925449d1dbe729
• https://github.com/cosmos/ibc-go/commit/e78b3a2b9c9ce80a67d6b1c2b7f9abcb225cc219
• https://github.com/cosmos/ibc-go

published 2024-04-05T17:16:01Z · modified 2024-05-20T20:14:02.042338Z · JSON