{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/cheqd/cheqd-node","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h2rp-8vpx-q9r4","id":"tcs_01M5KG7E5SEYKBPSXCX304KXKQ","modified_at":"2025-03-25T20:22:23.406725Z","published_at":"2025-03-25T19:38:11Z","references":["https://osv.dev/vulnerability/GO-2025-3520","https://github.com/cheqd/cheqd-node/security/advisories/GHSA-h2rp-8vpx-q9r4","https://github.com/cheqd/cheqd-node/commit/5a58b08dfb8dfc24631fb85b641cb75e9178d07f","https://github.com/cheqd/cheqd-node/releases/tag/v3.1.8","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-47ww-ff84-4jrg","https://github.com/cosmos/ibc-go/security/advisories/GHSA-4wf3-5qj9-368v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3520","url":"https://osv.dev/vulnerability/GO-2025-3520"}],"summary":"cheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002) in github.com/cheqd/cheqd-node"}