{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.47.15 or later.","affected":[{"fixed":"0.47.15","introduced":"0"},{"fixed":"0.50.11","introduced":"0.50.0-alpha.0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.47.15","0.50.11"],"ghsa_id":"GHSA-8wcc-m6j2-qxvm","id":"tcs_01M5KG6DKSZ06TY664CB1ZA8GN","modified_at":"2024-12-20T21:48:20Z","published_at":"2024-12-18T16:35:57Z","references":["https://osv.dev/vulnerability/GO-2024-3339","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm","https://github.com/cosmos/cosmos-sdk/commit/c6b1bdcd5628e3e425a3f02881d3c7db1d7af653","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.11"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3339#Go/github.com/cosmos/cosmos-sdk","url":"https://osv.dev/vulnerability/GO-2024-3339"}],"summary":"Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk"}