Vulnerability GO-2025-3476
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
March 03, 2025 at 04:11 PM UTC
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
v0.0.2 - v0.47.15
v0.0.2 - v0.47.15
Summary
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Details
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
1 year ago
Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
v0.0.2 - v0.50.13 GO-2025-3803
v0.0.2 - v0.50.13 GO-2025-3803
High Risk
1 year ago
Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
v0.0.2 - v0.50.13 and v0.52.0-alpha.1 - v0.53.2 GHSA-p22h-3m2v-cmgh
v0.0.2 - v0.50.13 and v0.52.0-alpha.1 - v0.53.2 GHSA-p22h-3m2v-cmgh
Unknown
1 year ago
Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
v0.0.2 - v0.47.16 GO-2025-3516
v0.0.2 - v0.47.16 GO-2025-3516
High Risk
1 year ago
Cosmos SDK: x/group can halt when erroring in EndBlocker
v0.0.2 - v0.47.16 and v0.50.0-alpha.0 - v0.50.12 GHSA-47ww-ff84-4jrg
v0.0.2 - v0.47.16 and v0.50.0-alpha.0 - v0.50.12 GHSA-47ww-ff84-4jrg
High Risk
1 year ago
Cosmos SDK: Groups module can halt chain when handling a malicious proposal
v0.0.2 - v0.47.15 and v0.50.0-alpha.0 - v0.50.11 GHSA-x5vx-95h7-rv4p
v0.0.2 - v0.47.15 and v0.50.0-alpha.0 - v0.50.11 GHSA-x5vx-95h7-rv4p
Impacted packages
Timeline
Published
1 year ago
March 03, 2025 at 04:11 PM UTC
Last Modified
1 year ago
March 03, 2025 at 04:27 PM UTC