{"action":"Upgrade cosmwasm-vm to 1.2.8 or later.","affected":[{"fixed":"1.2.8","introduced":"0.0.0-0"},{"fixed":"1.3.4","introduced":"1.3.0"},{"fixed":"1.4.2","introduced":"1.4.0"},{"fixed":"1.5.1","introduced":"1.5.0"}],"component":"cosmwasm-vm","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.2.8","1.3.4","1.4.2","1.5.1"],"ghsa_id":"GHSA-75qh-gg76-p2w4","id":"tcs_01M5KF9AGRXM89WHTPVTN5SK8S","modified_at":"2025-10-28T06:29:18.064669Z","published_at":"2024-08-27T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0366","https://crates.io/crates/cosmwasm-vm","https://rustsec.org/advisories/RUSTSEC-2024-0366.html","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2023-004.md"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0366","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0366"}],"summary":"CWA-2023-004: Excessive number of function parameters in compiled Wasm"}