{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.44.2 or later.","affected":[{"fixed":"0.44.2","introduced":"0.43.0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":["CVE-2021-41135"],"ecosystem":"Go","epss":0.01713,"exploited":false,"fixed_versions":["0.44.2"],"ghsa_id":"GHSA-2p6r-37p9-89p2","id":"tcs_01M5KESF72VSQCG3QXDYQDEC12","modified_at":"2026-07-08T06:28:41.904459282Z","published_at":"2021-10-21T17:46:57Z","references":["https://osv.dev/vulnerability/GHSA-2p6r-37p9-89p2","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-2p6r-37p9-89p2","https://nvd.nist.gov/vuln/detail/CVE-2021-41135","https://github.com/cosmos/cosmos-sdk/commit/68ab790a761e80d3674f821794cf18ccbfed45ee","https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349","https://github.com/cosmos/cosmos-sdk","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-2p6r-37p9-89p2","url":"https://osv.dev/vulnerability/GHSA-2p6r-37p9-89p2"}],"summary":"Authz Module Non-Determinism"}