Go/github.com/evmos/evmos/v12 CVE-2024-32873, CVE-2024-37158, CVE-2024-37159: low 3.5, EPSS 0.38%

evmos allows transferring unvested tokens after delegations

Action: Upgrade github.com/evmos/evmos/v12 to 18.0.0 or later.

go get github.com/evmos/evmos/v12@v18.0.0

Affected

Fixed versions

Sources

• osv: GHSA-pxv8-qhrh-jc7v#Go/github.com/evmos/evmos/v12
• https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7v
• https://nvd.nist.gov/vuln/detail/CVE-2024-32873
• https://nvd.nist.gov/vuln/detail/CVE-2024-37158
• https://nvd.nist.gov/vuln/detail/CVE-2024-37159
• https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb
• https://github.com/evmos/evmos
• https://pkg.go.dev/vuln/GO-2024-2891

CVE-2024-32873, CVE-2024-37158, CVE-2024-37159 · published 2024-06-06T18:21:05Z · modified 2026-09-10T03:50:15.693743484Z · JSON