{"action":"Upgrade github.com/CosmWasm/wasmvm to 1.2.5 or later.","affected":[{"fixed":"1.2.5","introduced":"0"},{"fixed":"1.3.1","introduced":"1.3.0"},{"fixed":"1.4.2","introduced":"1.4.0"},{"fixed":"1.5.1","introduced":"1.5.0"}],"component":"github.com/CosmWasm/wasmvm","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.2.5","1.3.1","1.4.2","1.5.1"],"ghsa_id":"GHSA-75qh-gg76-p2w4","id":"tcs_01M5KG56HQMBRZ3J2DFRZZ23M8","modified_at":"2026-03-03T04:55:46.566746Z","published_at":"2024-12-20T20:36:46Z","references":["https://osv.dev/vulnerability/GO-2024-3101","https://github.com/advisories/GHSA-75qh-gg76-p2w4","https://forum.cosmos.network/t/high-severity-security-patch-upcoming-on-wed-10th-cwa-2023-004-brought-to-you-by-certik-and-confio/12840","https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2023-004.md","https://rustsec.org/advisories/RUSTSEC-2024-0366.html","https://www.certik.com/resources/blog/risk-and-security-enhancement-for-app-chains-an-in-depth-writeup-of-cwa-2023"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3101","url":"https://osv.dev/vulnerability/GO-2024-3101"}],"summary":"Excessive number of function parameters in compiled Wasm in github.com/CosmWasm/wasmvm"}