{"action":"Upgrade github.com/CosmWasm/wasmvm to 1.5.5 or later.","affected":[{"fixed":"1.5.5","introduced":"0"}],"component":"github.com/CosmWasm/wasmvm","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.5.5"],"ghsa_id":"GHSA-vmqh-5232-v43r","id":"tcs_01M5KF3N209DBXV43PDP9RAF17","modified_at":"2024-12-10T16:55:37Z","published_at":"2024-12-10T16:55:37Z","references":["https://osv.dev/vulnerability/GHSA-vmqh-5232-v43r","https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-vmqh-5232-v43r","https://github.com/CosmWasm/cosmwasm/commit/108e7dcbf9c21df0fa83f355ad3a7355d7f220cb","https://github.com/CosmWasm/cosmwasm/commit/edcdbc520d4f5521eed42de6e2869658278e91fd","https://github.com/CosmWasm/cosmwasm/commit/f63429ca59eb44dd5d780c1572016581337091e4","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-008.md","https://github.com/CosmWasm/wasmvm"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vmqh-5232-v43r#Go/github.com/CosmWasm/wasmvm","url":"https://osv.dev/vulnerability/GHSA-vmqh-5232-v43r"}],"summary":"Panic in wasmvm can slow down block production"}