Go/github.com/cosmos/cosmos-sdk: unknown
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Action: Upgrade github.com/cosmos/cosmos-sdk to 0.47.16-ics-lsm or later.
go get github.com/cosmos/cosmos-sdk@v0.47.16-ics-lsmgo get github.com/cosmos/cosmos-sdk@v0.50.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.47.16-ics-lsm | - |
| 0.50.0-alpha.0 | 0.50.12 | - |
Fixed versions
| 0.47.16-ics-lsm | 0.50.12 |
Sources
- osv: GO-2025-3476
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p
- https://github.com/cosmos/cosmos-sdk/commit/0a98b65b24900a0e608866c78f172cf8e4140aea
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.12
published · modified · JSON