CVE-2025-25500
1 advisory.
crates.io/cosmwasm CVE-2025-25500: medium 6.5, EPSS 0.80%
CosmWasm Allows Bypass of Capability Restrictions in Blockchains
Action: Upgrade cosmwasm to 2.2.0 or later.
cargo update -p cosmwasm --precise 2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-cg8r-jwg7-r2x4
- https://nvd.nist.gov/vuln/detail/CVE-2025-25500
- https://gist.github.com/H3T76/8096a6ff9410f3a6d9a25db1a68ae657#file-cve-2025-25500
- https://github.com/CVEProject/cveproject.github.io/blob/gh-pages/requester/reservation-guidelines.md
- https://github.com/CosmWasm/cosmwasm
- https://github.com/CosmWasm/cosmwasm/blob/v2.2.0/CHANGELOG.md
CVE-2025-25500 · published · modified · JSON