CVE-2021-41135
1 advisory.
Go/github.com/cosmos/cosmos-sdk CVE-2021-41135: medium 6.5, EPSS 1.71%
Authz Module Non-Determinism
Action: Upgrade github.com/cosmos/cosmos-sdk to 0.44.2 or later.
go get github.com/cosmos/cosmos-sdk@v0.44.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.43.0 | 0.44.2 | - |
Fixed versions
| 0.44.2 |
Sources
- osv: GHSA-2p6r-37p9-89p2
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-2p6r-37p9-89p2
- https://nvd.nist.gov/vuln/detail/CVE-2021-41135
- https://github.com/cosmos/cosmos-sdk/commit/68ab790a761e80d3674f821794cf18ccbfed45ee
- https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349
- https://github.com/cosmos/cosmos-sdk
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.2
CVE-2021-41135 · published · modified · JSON