{"action":"Upgrade cosmossdk.io/math to 1.4.0 or later.","affected":[{"fixed":"1.4.0","introduced":"0"}],"component":"cosmossdk.io/math","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.4.0"],"ghsa_id":"GHSA-7225-m954-23v7","id":"tcs_01M5KG6201XR0FT03JH8YN723F","modified_at":"2024-12-12T22:00:04Z","published_at":"2024-11-21T19:52:52Z","references":["https://osv.dev/vulnerability/GO-2024-3279","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-7225-m954-23v7","https://github.com/cosmos/cosmos-sdk/commit/c6522a72a45c34897f9fc85d438c0b74d52f8862"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3279","url":"https://osv.dev/vulnerability/GO-2024-3279"}],"summary":"Mismatched bit-length validation in can lead to panic in cosmossdk.io/math"}