{"action":"Upgrade cosmossdk.io/x/tx to 0.13.7 or later.","affected":[{"fixed":"0.13.7","introduced":"0"}],"component":"cosmossdk.io/x/tx","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.13.7"],"ghsa_id":"GHSA-8wcc-m6j2-qxvm","id":"tcs_01M5KF4GWJYN3DZ3DHM5JEZVD8","modified_at":"2024-12-23T17:13:22Z","published_at":"2024-12-16T19:33:30Z","references":["https://osv.dev/vulnerability/GHSA-8wcc-m6j2-qxvm","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm","https://github.com/cosmos/cosmos-sdk/commit/c6b1bdcd5628e3e425a3f02881d3c7db1d7af653","https://github.com/cosmos/cosmos-sdk","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.11"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8wcc-m6j2-qxvm#Go/cosmossdk.io/x/tx","url":"https://osv.dev/vulnerability/GHSA-8wcc-m6j2-qxvm"}],"summary":"ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion"}