Security
فارسی
All products

github.com/cosmos/cosmos-sdk

Go · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ASA-2024-005: Potential slashing evasion during re-delegationGHSA-86H5-XCPX-CFQC · GO-2024-2584Version ranges need review. github.com/cosmos/cosmos-sdk Go Low Fix reported
Cosmos-SDK Cosmovisor component may be vulnerable to denial of serviceGHSA-23PX-MW2P-46QM github.com/cosmos/cosmos-sdk Go Medium Fix reported
Authz Module Non-DeterminismCVE-2021-41135 · GHSA-2P6R-37P9-89P2 github.com/cosmos/cosmos-sdk Go Medium Fix reported
ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting ModuleGHSA-4J93-FM92-RP4M · GO-2024-2572Version ranges need review. github.com/cosmos/cosmos-sdk Go Medium Fix reported
ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`GHSA-2557-X9MG-76W8 · GO-2024-2571Version ranges need review. github.com/cosmos/cosmos-sdk Go Medium Fix reported
Cosmos SDK: x/group can halt when erroring in EndBlockerGHSA-47WW-FF84-4JRG · GO-2025-3516Version ranges need review. github.com/cosmos/cosmos-sdk Go High Fix reported
Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain haltGHSA-P22H-3M2V-CMGH · GO-2025-3803Version ranges need review. github.com/cosmos/cosmos-sdk Go High Fix reported
Cosmos SDK: Groups module can halt chain when handling a malicious proposalGHSA-X5VX-95H7-RV4P · GO-2025-3476Version ranges need review. github.com/cosmos/cosmos-sdk Go High Fix reported
ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion GHSA-8WCC-M6J2-QXVM · GO-2024-3339Version ranges need review. cosmossdk.io/x/txgithub.com/cosmos/cosmos-sdk Go High Fix reported
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptionsGHSA-95RX-M9M5-M94V · GO-2024-2638Version ranges need review. github.com/cosmos/cosmos-sdk Go High Fix reported
github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFeeGHSA-W5W5-2882-47PC · GO-2023-1881Version ranges need review. github.com/cosmos/cosmos-sdk Go Low No fix reported
Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain haltGHSA-QFC5-6R3J-JJ22 · GO-2023-1821Version ranges need review. github.com/cosmos/cosmos-sdk Go Low No fix reported
Barberry Security Advisory - regarding x/auth periodic vesting accountsGHSA-J2CR-JC39-WPX5 github.com/cosmos/cosmos-sdk Go Medium Fix reported