{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/cosmos/ibc-go/v2","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j496-crgh-34mx","id":"tcs_01M5KFDEEX98K8HREAPPZRNMRW","modified_at":"2024-05-20T20:14:02.042338Z","published_at":"2024-04-05T17:16:01Z","references":["https://osv.dev/vulnerability/GHSA-j496-crgh-34mx","https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx","https://github.com/cosmos/ibc-go/commit/04275aa77644dec97fb91b749d963c992591b7f7","https://github.com/cosmos/ibc-go/commit/278fa89f192af04af32d82fd5ef41f84f82edd97","https://github.com/cosmos/ibc-go/commit/5e2e9ebc2f67df324028dd36a1837ffcc8e6b0dd","https://github.com/cosmos/ibc-go/commit/a0185df3953070ba5ebcb66735925449d1dbe729","https://github.com/cosmos/ibc-go/commit/e78b3a2b9c9ce80a67d6b1c2b7f9abcb225cc219","https://github.com/cosmos/ibc-go"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-j496-crgh-34mx#Go/github.com/cosmos/ibc-go/v2","url":"https://osv.dev/vulnerability/GHSA-j496-crgh-34mx"}],"summary":"ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks"}