{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.47.16-ics-lsm or later.","affected":[{"fixed":"0.47.16-ics-lsm","introduced":"0"},{"fixed":"0.50.12","introduced":"0.50.0-alpha.0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.47.16-ics-lsm","0.50.12"],"ghsa_id":"GHSA-x5vx-95h7-rv4p","id":"tcs_01M5KFRMKJ5FYH6YC27W3SR8EF","modified_at":"2025-03-03T16:27:07.249528Z","published_at":"2025-02-20T20:18:25Z","references":["https://osv.dev/vulnerability/GHSA-x5vx-95h7-rv4p","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p","https://github.com/cosmos/cosmos-sdk/commit/0a98b65b24900a0e608866c78f172cf8e4140aea","https://github.com/cosmos/cosmos-sdk","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.12"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-x5vx-95h7-rv4p","url":"https://osv.dev/vulnerability/GHSA-x5vx-95h7-rv4p"}],"summary":"Cosmos SDK: Groups module can halt chain when handling a malicious proposal"}