{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/cosmos/ibc-go/v6","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jg6f-48ff-5xrw","id":"tcs_01M5KFE4MHET0NJS0VX3CT2TCC","modified_at":"2025-03-05T16:12:06.695820Z","published_at":"2025-02-28T17:46:04Z","references":["https://osv.dev/vulnerability/GHSA-jg6f-48ff-5xrw","https://github.com/cosmos/ibc-go/security/advisories/GHSA-jg6f-48ff-5xrw","https://github.com/cosmos/ibc-go/commit/59987d52d959dc5876ffd4f307c9b33a52a43748","https://github.com/cosmos/ibc-go/commit/9869b3c6f7eb05a935b1eb33611c5406f68438a5","https://github.com/cosmos/ibc-go"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-jg6f-48ff-5xrw#Go/github.com/cosmos/ibc-go/v6","url":"https://osv.dev/vulnerability/GHSA-jg6f-48ff-5xrw"}],"summary":"IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement"}