{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.5.0"}],"component":"github.com/cosmos/ibc-go/v2","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qjcv-rx3v-7mvj","id":"tcs_01M5KFK4P73PJSDRVCDGH294VS","modified_at":"2024-05-23T16:07:38Z","published_at":"2024-05-20T21:51:33Z","references":["https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj","https://github.com/cosmos/ibc-go/issues/1532","https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc","https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731","https://github.com/cosmos/ibc-go","https://github.com/cosmos/ibc-go/releases/tag/v6.1.1","https://pkg.go.dev/vuln/GO-2023-1860"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qjcv-rx3v-7mvj#Go/github.com/cosmos/ibc-go/v2","url":"https://osv.dev/vulnerability/GHSA-qjcv-rx3v-7mvj"}],"summary":"github.com/cosmos/ibc-go affected by IBC protocol \"Huckleberry\" vulnerability"}