{"action":"Upgrade github.com/CosmWasm/wasmvm to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"0"}],"component":"github.com/CosmWasm/wasmvm","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-rg2q-2jh9-447q","id":"tcs_01M5KF32J8FEVD563ZYRZFWT3A","modified_at":"2024-08-08T17:03:07Z","published_at":"2024-08-08T16:30:50Z","references":["https://osv.dev/vulnerability/GHSA-rg2q-2jh9-447q","https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-rg2q-2jh9-447q","https://github.com/CosmWasm/cosmwasm/commit/5bef1c588933bd60a04bb70099150cf84b69e144","https://github.com/CosmWasm/cosmwasm/commit/9b4d6d03772b75d500a7d3c972d0d8ba6d085c06","https://github.com/CosmWasm/cosmwasm/commit/c1313afeb261e17b1c8cf6a1eacee1da0dac42ae","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-004.md","https://github.com/CosmWasm/wasmvm","https://rustsec.org/advisories/RUSTSEC-2024-0361.html"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-rg2q-2jh9-447q#Go/github.com/CosmWasm/wasmvm","url":"https://osv.dev/vulnerability/GHSA-rg2q-2jh9-447q"}],"summary":"Gas mispricing in cosmwasm-vm"}