{"action":"Upgrade cosmwasm-vm to 1.5.8 or later.","affected":[{"fixed":"2.1.4","introduced":"2.1.0"},{"fixed":"2.0.7","introduced":"2.0.0"},{"fixed":"1.5.8","introduced":"0"}],"component":"cosmwasm-vm","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["2.1.4","2.0.7","1.5.8"],"ghsa_id":"GHSA-2q97-m5rc-p3gp","id":"tcs_01M5KERGCHP2GHHXYCWG7B8YJ5","modified_at":"2024-12-10T16:55:39Z","published_at":"2024-12-10T16:55:39Z","references":["https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-2q97-m5rc-p3gp","https://github.com/CosmWasm/cosmwasm/commit/0e70bd83119b02f99a2c0397f0913e0803750fd9","https://github.com/CosmWasm/cosmwasm/commit/16eabd681790508b13dac8e67f9e6e61045240ea","https://github.com/CosmWasm/cosmwasm/commit/f5bf24f3acadca2892afd58cc3ce5fdeb932d492","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-007.md","https://github.com/CosmWasm/wasmvm"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2q97-m5rc-p3gp#crates.io/cosmwasm-vm","url":"https://osv.dev/vulnerability/GHSA-2q97-m5rc-p3gp"}],"summary":"CosmWasm VM Incorrect metering"}