{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w5w5-2882-47pc","id":"tcs_01M5KFZGKDQ43S2T6BDQNJ0707","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-07-06T20:13:03Z","references":["https://osv.dev/vulnerability/GO-2023-1881","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-w5w5-2882-47pc","https://github.com/cosmos/cosmos-sdk/issues/15706"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1881","url":"https://osv.dev/vulnerability/GO-2023-1881"}],"summary":"The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk"}