{"action":"Upgrade github.com/CosmWasm/wasmvm to 1.5.5 or later.","affected":[{"fixed":"1.5.5","introduced":"0"}],"component":"github.com/CosmWasm/wasmvm","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.5.5"],"ghsa_id":"GHSA-2q97-m5rc-p3gp","id":"tcs_01M5KERG7743EQ0FNT4HH2GSDE","modified_at":"2024-12-10T16:55:39Z","published_at":"2024-12-10T16:55:39Z","references":["https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/cosmwasm/commit/0e70bd83119b02f99a2c0397f0913e0803750fd9","https://github.com/CosmWasm/cosmwasm/commit/16eabd681790508b13dac8e67f9e6e61045240ea","https://github.com/CosmWasm/cosmwasm/commit/f5bf24f3acadca2892afd58cc3ce5fdeb932d492","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-007.md","https://github.com/CosmWasm/wasmvm"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2q97-m5rc-p3gp#Go/github.com/CosmWasm/wasmvm","url":"https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp"}],"summary":"CosmWasm VM Incorrect metering"}