Advisory Database
  • Advisories
  • Dependency Scanning
  1. golang
  2. ›
  3. github.com/CosmWasm/wasmvm
  4. ›
  5. GHSA-rg2q-2jh9-447q

GHSA-rg2q-2jh9-447q: Gas mispricing in cosmwasm-vm

August 8, 2024

Component: wasmvm Criticality: Medium (ACMv1: I:Moderate; L:Likely) Patched versions: wasmvm 1.5.3, 2.0.2, 2.1.1

References

  • github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-004.md
  • github.com/CosmWasm/cosmwasm/commit/5bef1c588933bd60a04bb70099150cf84b69e144
  • github.com/CosmWasm/cosmwasm/commit/9b4d6d03772b75d500a7d3c972d0d8ba6d085c06
  • github.com/CosmWasm/cosmwasm/commit/c1313afeb261e17b1c8cf6a1eacee1da0dac42ae
  • github.com/CosmWasm/wasmvm
  • github.com/CosmWasm/wasmvm/security/advisories/GHSA-rg2q-2jh9-447q
  • github.com/advisories/GHSA-rg2q-2jh9-447q
  • rustsec.org/advisories/RUSTSEC-2024-0361.html

Code Behaviors & Features

Detect and mitigate GHSA-rg2q-2jh9-447q with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 1.5.3

Fixed versions

  • 1.5.3

Solution

Upgrade to version 1.5.3 or above.

Impact 4.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Learn more about CVSS

Weakness

  • CWE-920: Improper Restriction of Power Consumption

Source file

go/github.com/CosmWasm/wasmvm/GHSA-rg2q-2jh9-447q.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:15:08 +0000.