{"action":"Upgrade github.com/cosmos/cosmos-sdk to 0.50.14 or later.","affected":[{"fixed":"0.50.14","introduced":"0"},{"fixed":"0.53.3","introduced":"0.52.0-alpha.1"}],"component":"github.com/cosmos/cosmos-sdk","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.50.14","0.53.3"],"ghsa_id":"GHSA-p22h-3m2v-cmgh","id":"tcs_01M5KG9CSKDWMBGPAX390MGTPB","modified_at":"2025-07-28T20:42:20.908326Z","published_at":"2025-07-28T19:57:01Z","references":["https://osv.dev/vulnerability/GO-2025-3803","https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-p22h-3m2v-cmgh","https://github.com/cosmos/cosmos-sdk/commit/c4a14fa7b6828432fdabdb8b4af68ade9403ce49","https://github.com/cosmos/cosmos-sdk/commit/f2e6295b662fdb27ea33da1296c29588ccdaab42"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3803","url":"https://osv.dev/vulnerability/GO-2025-3803"}],"summary":"Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk"}