{"action":"Upgrade github.com/tendermint/tendermint to 0.34.9 or later.","affected":[{"fixed":"0.34.9","introduced":"0.34.0"}],"component":"github.com/tendermint/tendermint","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.34.9"],"ghsa_id":"GHSA-f3w5-v9xx-rp8p","id":"tcs_01M5KF87TNYF7RGHZEZ5H3HCEM","modified_at":"2021-05-20T20:10:47Z","published_at":"2021-12-20T18:17:41Z","references":["https://osv.dev/vulnerability/GHSA-f3w5-v9xx-rp8p","https://github.com/tendermint/tendermint/security/advisories/GHSA-f3w5-v9xx-rp8p"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f3w5-v9xx-rp8p","url":"https://osv.dev/vulnerability/GHSA-f3w5-v9xx-rp8p"}],"summary":"Signature verification failure in Tendermint"}