{"action":"Upgrade cosmwasm-vm to 1.2.8 or later.","affected":[{"fixed":"1.2.8","introduced":"0"},{"fixed":"1.3.4","introduced":"1.3.0"},{"fixed":"1.4.2","introduced":"1.4.0"},{"fixed":"1.5.1","introduced":"1.5.0"}],"component":"cosmwasm-vm","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.2.8","1.3.4","1.4.2","1.5.1"],"ghsa_id":"GHSA-75qh-gg76-p2w4","id":"tcs_01M5KEV106VN0VABETHNZKPTT3","modified_at":"2025-10-28T06:29:18.064669Z","published_at":"2024-08-27T19:55:40Z","references":["https://osv.dev/vulnerability/GHSA-75qh-gg76-p2w4","https://forum.cosmos.network/t/high-severity-security-patch-upcoming-on-wed-10th-cwa-2023-004-brought-to-you-by-certik-and-confio/12840","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2023-004.md","https://github.com/advisories/GHSA-75qh-gg76-p2w4","https://rustsec.org/advisories/RUSTSEC-2024-0366.html","https://www.certik.com/resources/blog/risk-and-security-enhancement-for-app-chains-an-in-depth-writeup-of-cwa-2023"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-75qh-gg76-p2w4","url":"https://osv.dev/vulnerability/GHSA-75qh-gg76-p2w4"}],"summary":"CWA-2023-004: Excessive number of function parameters in compiled Wasm"}