Go/github.com/cosmos/ibc-go/v8: unknown
Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go
Action: Upgrade github.com/cosmos/ibc-go/v8 to 8.7.0 or later.
go get github.com/cosmos/ibc-go/v8@v8.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0-alpha.1 | 8.7.0 | - |
Fixed versions
| 8.7.0 |
Sources
- osv: GO-2025-3517#Go/github.com/cosmos/ibc-go/v8
- https://github.com/cosmos/ibc-go/security/advisories/GHSA-4wf3-5qj9-368v
- https://github.com/cosmos/ibc-go/releases/tag/v7.10.0
- https://github.com/cosmos/ibc-go/releases/tag/v8.7.0
published · modified · JSON