{"action":"Upgrade github.com/cosmos/ibc-go/v4 to 4.1.3 or later.","affected":[{"fixed":"4.1.3","introduced":"0"},{"fixed":"4.2.2","introduced":"4.2.0"},{"fixed":"4.3.1","introduced":"4.3.0"},{"fixed":"4.4.1","introduced":"4.4.0"}],"component":"github.com/cosmos/ibc-go/v4","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["4.1.3","4.2.2","4.3.1","4.4.1"],"ghsa_id":"GHSA-qjcv-rx3v-7mvj","id":"tcs_01M5KFK4EKMPFFDNRHMY81PQHM","modified_at":"2024-05-23T16:07:38Z","published_at":"2024-05-20T21:51:33Z","references":["https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj","https://github.com/cosmos/ibc-go/issues/1532","https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc","https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731","https://github.com/cosmos/ibc-go","https://github.com/cosmos/ibc-go/releases/tag/v6.1.1","https://pkg.go.dev/vuln/GO-2023-1860"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qjcv-rx3v-7mvj#Go/github.com/cosmos/ibc-go/v4","url":"https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj"}],"summary":"github.com/cosmos/ibc-go affected by IBC protocol \"Huckleberry\" vulnerability"}