{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.47.16-ics-lsm or later.","affected":[{"fixed":"0.47.16-ics-lsm","introduced":"0"},{"fixed":"0.50.12","introduced":"0.50.0-alpha.0"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.47.16-ics-lsm","0.50.12"],"ghsa_id":"GHSA-x5vx-95h7-rv4p","id":"tcs_01M5KG73ZBV8JZBQX19VNBQCZQ","modified_at":"2025-03-03T16:27:07.249528Z","published_at":"2025-03-03T16:11:01Z","references":["https://osv.dev/vulnerability/GO-2025-3476","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p","https://github.com/cosmos/cosmos-sdk/commit/0a98b65b24900a0e608866c78f172cf8e4140aea","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16","https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.12"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3476","url":"https://osv.dev/vulnerability/GO-2025-3476"}],"summary":"Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk"}