{"action":"Upgrade github.com/cosmos/ibc-go/v5 to 5.4.0 or later.","affected":[{"fixed":"5.4.0","introduced":"0"}],"component":"github.com/cosmos/ibc-go/v5","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["5.4.0"],"ghsa_id":"GHSA-j496-crgh-34mx","id":"tcs_01M5KG26DBWBPY3R5ASZ741VT9","modified_at":"2026-03-03T04:55:14.008878Z","published_at":"2024-05-20T19:46:03Z","references":["https://osv.dev/vulnerability/GO-2024-2694","https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx","https://github.com/cosmos/ibc-go/commit/04275aa77644dec97fb91b749d963c992591b7f7","https://github.com/cosmos/ibc-go/commit/278fa89f192af04af32d82fd5ef41f84f82edd97","https://github.com/cosmos/ibc-go/commit/5e2e9ebc2f67df324028dd36a1837ffcc8e6b0dd","https://github.com/cosmos/ibc-go/commit/a0185df3953070ba5ebcb66735925449d1dbe729","https://github.com/cosmos/ibc-go/commit/e78b3a2b9c9ce80a67d6b1c2b7f9abcb225cc219"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2694#Go/github.com/cosmos/ibc-go/v5","url":"https://osv.dev/vulnerability/GO-2024-2694"}],"summary":"Potential Reentrancy using Timeout Callbacks in ibc-hooks in github.com/cosmos/ibc-go"}