{"action":"Upgrade github.com/tendermint/tendermint to 0.31.12 or later.","affected":[{"fixed":"0.33.3","introduced":"0.33.0"},{"fixed":"0.31.12","introduced":"0"},{"fixed":"0.32.10","introduced":"0.32.0"}],"component":"github.com/tendermint/tendermint","cve_ids":["CVE-2020-5303"],"ecosystem":"Go","epss":0.01369,"exploited":false,"fixed_versions":["0.33.3","0.31.12","0.32.10"],"ghsa_id":"GHSA-v24h-pjjv-mcp6","id":"tcs_01M5KFNE51SF01BVDF46JQJ83Z","modified_at":"2026-07-08T06:29:14.429353990Z","published_at":"2021-05-27T18:44:09Z","references":["https://osv.dev/vulnerability/GHSA-v24h-pjjv-mcp6","https://github.com/tendermint/tendermint/security/advisories/GHSA-v24h-pjjv-mcp6","https://nvd.nist.gov/vuln/detail/CVE-2020-5303","https://github.com/tendermint/tendermint/issues/1696","https://github.com/tendermint/tendermint/issues/3338","https://github.com/tendermint/tendermint/commit/e2d6859afd7dba4cf97c7f7d412e7d8fc908d1cd","https://hackerone.com/reports/820317","https://github.com/tendermint/tendermint","https://github.com/tendermint/tendermint/blob/master/CHANGELOG.md#denial-of-service-1"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-v24h-pjjv-mcp6","url":"https://osv.dev/vulnerability/GHSA-v24h-pjjv-mcp6"}],"summary":"Denial of service in Tendermint"}