Go/github.com/cosmos/ibc-go/v4: medium
github.com/cosmos/ibc-go affected by IBC protocol "Huckleberry" vulnerability
Action: Upgrade github.com/cosmos/ibc-go/v4 to 4.1.3 or later.
go get github.com/cosmos/ibc-go/v4@v4.1.3go get github.com/cosmos/ibc-go/v4@v4.2.2go get github.com/cosmos/ibc-go/v4@v4.3.1go get github.com/cosmos/ibc-go/v4@v4.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.3 | - |
| 4.2.0 | 4.2.2 | - |
| 4.3.0 | 4.3.1 | - |
| 4.4.0 | 4.4.1 | - |
Fixed versions
| 4.1.3 | 4.2.2 | 4.3.1 | 4.4.1 |
Sources
- osv: GHSA-qjcv-rx3v-7mvj#Go/github.com/cosmos/ibc-go/v4
- https://github.com/cosmos/ibc-go/issues/1532
- https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc
- https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731
- https://github.com/cosmos/ibc-go
- https://github.com/cosmos/ibc-go/releases/tag/v6.1.1
- https://pkg.go.dev/vuln/GO-2023-1860
published · modified · JSON