{"action":"Upgrade cosmwasm-std to 1.4.4 or later.","affected":[{"fixed":"1.4.4","introduced":"1.3.0"},{"fixed":"1.5.4","introduced":"1.5.0"},{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"cosmwasm-std","cve_ids":["CVE-2024-58263"],"ecosystem":"crates.io","epss":0.00496,"exploited":false,"fixed_versions":["1.4.4","1.5.4","2.0.2"],"ghsa_id":"GHSA-8724-5xmm-w5xq","id":"tcs_01M5KEVN90KZ5Q4SX82B6XV82C","modified_at":"2025-07-28T16:27:06.685643Z","published_at":"2024-04-24T17:37:59Z","references":["https://osv.dev/vulnerability/GHSA-8724-5xmm-w5xq","https://nvd.nist.gov/vuln/detail/CVE-2024-58263","https://github.com/CosmWasm/cosmwasm/commit/607e7fc710fb9441096e8edbaa12879b552c8f65","https://github.com/CosmWasm/cosmwasm/commit/a6a639e09adc355b5f889a09141649005cb08a46","https://github.com/CosmWasm/cosmwasm/commit/eff79bcbe73b61178817aacf0a6449437adad6a9","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-002.md","https://github.com/CosmWasm/cosmwasm","https://rustsec.org/advisories/RUSTSEC-2024-0338.html"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-8724-5xmm-w5xq","url":"https://osv.dev/vulnerability/GHSA-8724-5xmm-w5xq"}],"summary":"CosmWasm affected by arithmetic overflows"}