Skip to content
OpenAdvisories

Package · Go

github.com/cosmos/cosmos-sdk

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    GHSA-p22h-3m2v-cmgh

    Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

    Description Name: ISA-2025-005: Integer Overflow in Cosmos SDK Component: CosmosSDK Criticality: High (Considerable Impact; Likely Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md)) Affected versio…

    github.com/cosmos/cosmos-sdk Go
  • High —
    GHSA-47ww-ff84-4jrg

    Cosmos SDK: x/group can halt when erroring in EndBlocker

    Name: ISA-2025-002: x/group can halt when erroring in EndBlocker Component: CosmosSDK Criticality: High (Considerable Impact; Likely Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md)) Affected vers…

    github.com/cosmos/cosmos-sdk Go
  • High —
    GHSA-x5vx-95h7-rv4p

    Cosmos SDK: Groups module can halt chain when handling a malicious proposal

    Name: ASA-2025-003: Groups module can halt chain when handling a malicious proposal Component: CosmosSDK Criticality: High (Considerable Impact; Likely Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX…

    github.com/cosmos/cosmos-sdk Go
  • High —
    GHSA-8wcc-m6j2-qxvm

    ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion

    ## Summary ### ASA-2024-0012 Name: ASA-2024-0012, Transaction decoding may result in a stack overflow Component: Cosmos SDK Criticality: High (Considerable Impact, and Possible Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resour…

    github.com/cosmos/cosmos-sdk cosmossdk.io/x/tx Go
  • High 7.1
    GHSA-95rx-m9m5-m94v

    ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

    ## ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions **Component**: Cosmos SDK **Criticality**: High **Affected Versions**: Cosmos SDK versions <= 0.50.4, on 0.50 branches **Affected Users**: Chain developers, V…

    github.com/cosmos/cosmos-sdk Go