github.com/cosmos/ibc-go

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Critical —

GHSA-4wf3-5qj9-368v

IBC-Go: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt

Name: ISA-2025-001: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: High (Considerable Impact; Likely Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/C…

github.com/cosmos/ibc-go/v6 github.com/cosmos/ibc-go/v5 github.com/cosmos/ibc-go/v7 github.com/cosmos/ibc-go/v4 Go

Mar 12, 2025
Critical —

GHSA-jg6f-48ff-5xrw

IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement

Name: ASA-2025-004: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: Critical (Considerable Impact; Almost Certain Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main…

github.com/cosmos/ibc-go/v4 github.com/cosmos/ibc-go/v6 github.com/cosmos/ibc-go/v5 github.com/cosmos/ibc-go/v7 Go

Feb 28, 2025
Medium —

GHSA-qjcv-rx3v-7mvj

github.com/cosmos/ibc-go affected by IBC protocol "Huckleberry" vulnerability

The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.

github.com/cosmos/ibc-go/v5 github.com/cosmos/ibc-go/v7 github.com/cosmos/ibc-go/v4 github.com/cosmos/ibc-go/v6 Go

May 20, 2024
Critical 9.1

GHSA-j496-crgh-34mx

ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks

**Name**: ASA-2024-007: Potential Reentrancy using Timeout Callbacks in ibc-hooks **Component**: ibc-go **Criticality**: Critical ([ACMv1](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md): I:Critical; L:AlmostCertain) **A…

github.com/cosmos/ibc-go/v4 github.com/cosmos/ibc-go/v6 github.com/cosmos/ibc-go/v5 github.com/cosmos/ibc-go/v7 Go

Apr 5, 2024