{"action":"Upgrade cosmwasm to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"cosmwasm","cve_ids":["CVE-2025-25500"],"ecosystem":"crates.io","epss":0.008,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-cg8r-jwg7-r2x4","id":"tcs_01M5KEWWH9123T77C76FKA1ZTV","modified_at":"2025-03-21T21:11:31Z","published_at":"2025-03-18T15:30:47Z","references":["https://osv.dev/vulnerability/GHSA-cg8r-jwg7-r2x4","https://nvd.nist.gov/vuln/detail/CVE-2025-25500","https://gist.github.com/H3T76/8096a6ff9410f3a6d9a25db1a68ae657#file-cve-2025-25500","https://github.com/CVEProject/cveproject.github.io/blob/gh-pages/requester/reservation-guidelines.md","https://github.com/CosmWasm/cosmwasm","https://github.com/CosmWasm/cosmwasm/blob/v2.2.0/CHANGELOG.md"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cg8r-jwg7-r2x4","url":"https://osv.dev/vulnerability/GHSA-cg8r-jwg7-r2x4"}],"summary":"CosmWasm Allows Bypass of Capability Restrictions in Blockchains"}