Skip to content
OpenAdvisories

Package · Go

github.com/cosmos/evm

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical —
    GHSA-54gx-3cgr-7mfm

    Cosmos EVM: incorrect state handling during nested EVM execution paths

    **Advisory ID:** ASA-2026-002 **Component:** ICS20 Precompile **Status:** Resolved **Published:** March 2026 **Contact:** [security@cosmoslabs.io](mailto:security@cosmoslabs.io) --- # Security Advisory ASA-2026-002 **Status: Resolved. A patch is available and…

    github.com/cosmos/evm Go
  • Critical —
    GHSA-8pfh-j44r-f654

    Cosmos EVM Vulnerability

    ## Patches Patched in versions `v0.3.1`, `v0.4.2`, and in the `v0.5.0` release. More information will be disclosed at a later point to ensure chains have time to safely upgrade. ## Workarounds No workarounds for chains that make use of static or dynamic preco…

    github.com/cosmos/evm Go
  • High —
    GHSA-mjfq-3qr2-6g84

    Cosmos EVM Allows Partial Precompile State Writes

    ### Impact Setting lower EVM call gas allows users to partially execute precompiles and error at specific points in the precompile code without reverting the partially written state. If executed on the distribution precompile when claiming funds, it could cau…

    github.com/cosmos/evm Go