{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.47.9 or later.","affected":[{"fixed":"0.50.4","introduced":"0.50.0"},{"fixed":"0.47.9","introduced":"0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.50.4","0.47.9"],"ghsa_id":"GHSA-2557-x9mg-76w8","id":"tcs_01M5KERE7QG9E8F1RQ8R8TTMMA","modified_at":"2024-05-23T18:32:11Z","published_at":"2024-02-21T00:13:46Z","references":["https://osv.dev/vulnerability/GHSA-2557-x9mg-76w8","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-2557-x9mg-76w8","https://github.com/cosmos/cosmos-sdk/commit/c05850241e2d615721e3492d15fee4e1deec082b","https://github.com/cosmos/cosmos-sdk/commit/fe32bcc1d65412c9b5737672956f0638c729ab7d","https://github.com/cosmos/cosmos-sdk","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.4"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2557-x9mg-76w8","url":"https://osv.dev/vulnerability/GHSA-2557-x9mg-76w8"}],"summary":"ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`"}