{"action":"Upgrade github.com/cosmos/ibc-go/v4 to 4.1.3 or later.","affected":[{"fixed":"4.1.3","introduced":"0"},{"fixed":"4.2.2","introduced":"4.2.0"},{"fixed":"4.3.1","introduced":"4.3.0"},{"fixed":"4.4.1","introduced":"4.4.0"}],"component":"github.com/cosmos/ibc-go/v4","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["4.1.3","4.2.2","4.3.1","4.4.1"],"id":"tcs_01M5KFZE3P4S265Q7M4KMR62W1","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-06-15T20:52:26Z","references":["https://osv.dev/vulnerability/GO-2023-1860","https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1860#Go/github.com/cosmos/ibc-go/v4","url":"https://osv.dev/vulnerability/GO-2023-1860"}],"summary":"IBC protocol \"Huckleberry\" vulnerability in github.com/cosmos/ibc-go"}