{"action":"Upgrade github.com/cosmos/ibc-go/v5 to 5.2.1 or later.","affected":[{"fixed":"5.2.1","introduced":"0"},{"fixed":"5.3.1","introduced":"5.3.0"}],"component":"github.com/cosmos/ibc-go/v5","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["5.2.1","5.3.1"],"ghsa_id":"GHSA-qjcv-rx3v-7mvj","id":"tcs_01M5KFK4AMXM7PKKFH2KCKQJCS","modified_at":"2024-05-23T16:07:38Z","published_at":"2024-05-20T21:51:33Z","references":["https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj","https://github.com/cosmos/ibc-go/issues/1532","https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc","https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731","https://github.com/cosmos/ibc-go","https://github.com/cosmos/ibc-go/releases/tag/v6.1.1","https://pkg.go.dev/vuln/GO-2023-1860"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qjcv-rx3v-7mvj#Go/github.com/cosmos/ibc-go/v5","url":"https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj"}],"summary":"github.com/cosmos/ibc-go affected by IBC protocol \"Huckleberry\" vulnerability"}