{"action":"Upgrade github.com/CosmWasm/wasmvm/v2 to 2.0.4 or later.","affected":[{"fixed":"2.1.3","introduced":"2.1.0"},{"fixed":"2.0.4","introduced":"2.0.0"}],"component":"github.com/CosmWasm/wasmvm/v2","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["2.1.3","2.0.4"],"ghsa_id":"GHSA-2q97-m5rc-p3gp","id":"tcs_01M5KERG2DEEBQBRPA74WJ4Y97","modified_at":"2024-12-10T16:55:39Z","published_at":"2024-12-10T16:55:39Z","references":["https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/cosmwasm/commit/0e70bd83119b02f99a2c0397f0913e0803750fd9","https://github.com/CosmWasm/cosmwasm/commit/16eabd681790508b13dac8e67f9e6e61045240ea","https://github.com/CosmWasm/cosmwasm/commit/f5bf24f3acadca2892afd58cc3ce5fdeb932d492","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-007.md","https://github.com/CosmWasm/wasmvm"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2q97-m5rc-p3gp","url":"https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp"}],"summary":"CosmWasm VM Incorrect metering"}