{"action":"Upgrade github.com/cosmos/ibc-go/v4 to 4.6.0 or later.","affected":[{"fixed":"4.6.0","introduced":"0"}],"component":"github.com/cosmos/ibc-go/v4","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["4.6.0"],"ghsa_id":"GHSA-j496-crgh-34mx","id":"tcs_01M5KFDDS53V9GEQZKGJ89ACKW","modified_at":"2024-05-20T20:14:02.042338Z","published_at":"2024-04-05T17:16:01Z","references":["https://osv.dev/vulnerability/GHSA-j496-crgh-34mx","https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx","https://github.com/cosmos/ibc-go/commit/04275aa77644dec97fb91b749d963c992591b7f7","https://github.com/cosmos/ibc-go/commit/278fa89f192af04af32d82fd5ef41f84f82edd97","https://github.com/cosmos/ibc-go/commit/5e2e9ebc2f67df324028dd36a1837ffcc8e6b0dd","https://github.com/cosmos/ibc-go/commit/a0185df3953070ba5ebcb66735925449d1dbe729","https://github.com/cosmos/ibc-go/commit/e78b3a2b9c9ce80a67d6b1c2b7f9abcb225cc219","https://github.com/cosmos/ibc-go"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-j496-crgh-34mx","url":"https://osv.dev/vulnerability/GHSA-j496-crgh-34mx"}],"summary":"ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks"}