{"action":"Upgrade github.com/babylonlabs-io/babylon/v4 to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"github.com/babylonlabs-io/babylon/v4","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-2fcv-qww3-9v6h","id":"tcs_01M5KES1D4JJ0ZSGM1M81AQ2E7","modified_at":"2025-11-27T08:58:39.215032Z","published_at":"2025-11-24T23:32:11Z","references":["https://osv.dev/vulnerability/GHSA-2fcv-qww3-9v6h","https://github.com/babylonlabs-io/babylon/security/advisories/GHSA-2fcv-qww3-9v6h","https://github.com/babylonlabs-io/babylon/pull/1873/commits/86f38abd2dca5a656195a9954bb569a08d662e2b","https://github.com/babylonlabs-io/babylon","https://github.com/babylonlabs-io/babylon/releases/tag/v4.1.0"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2fcv-qww3-9v6h","url":"https://osv.dev/vulnerability/GHSA-2fcv-qww3-9v6h"}],"summary":"Babylon's malformed vote extensions are not rejected"}