Skip to content
OpenAdvisories
Unscored GO-2023-1860

IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go

Published Jun 15, 2023 · Updated May 20, 2024 · Assigned by GO

Package: github.com/cosmos/ibc-go/v4 Package: github.com/cosmos/ibc-go/v5 Package: github.com/cosmos/ibc-go/v6 Package: github.com/cosmos/ibc-go/v7 Ecosystem: Go

Description

The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/cosmos/ibc-go/v4 < 4.1.3 · >= 4.2.0, < 4.2.2 · >= 4.3.0, < 4.3.1 · >= 4.4.0, < 4.4.1 4.1.3, 4.2.2, 4.3.1, 4.4.1 GO-2023-1860
Go github.com/cosmos/ibc-go/v5 < 5.2.1 · >= 5.3.0, < 5.3.1 5.2.1, 5.3.1 GO-2023-1860
Go github.com/cosmos/ibc-go/v6 < 6.1.1 6.1.1 GO-2023-1860
Go github.com/cosmos/ibc-go/v7 < 7.0.1 7.0.1 GO-2023-1860

References