GHSA-7c94-gvvj-r3mg
cheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerability
GHSA-7c94-gvvj-r3mg is a vulnerability with no CVSS score yet in github.com/cheqd/cheqd-node, published June 5, 2023. No source lists public exploit code. Fixed in github.com/cheqd/cheqd-node 1.4.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.4.2github.com/cheqd/cheqd-node
Description
Impact
This vulnerability affects the ibc-go package for those running full nodes, dubbed "Huckleberry". According to their advisory:
This issue is low-severity in general, and it has a low impact and likelihood of exploitation. Depending on how a full node is architected, this issue could potentially yield a high or critical severity vulnerability.
There is no vulnerability in the DID/resource modules for cheqd-node.
Patches
Node operators are requested to upgrade to cheqd-node v1.4.2. This is a non-state breaking release, and does not require a coordinated upgrade across all node operators.
Workarounds
No. Node operators are recommended to upgrade to the latest release version.
References
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/cheqd/cheqd-nodeGo | before 1.4.2 | 1.4.2 |
What each source reports
GitHub AdvisoriesNo score
cheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerability
Impact
This vulnerability affects the ibc-go package for those running full nodes, dubbed "Huckleberry". According to their advisory:
This issue is low-severity in general, and it has a low impact and likelihood of exploitation. Depending on how a full node is architected, this issue could potentially yield a high or critical severity vulnerability.
There is no vulnerability in the DID/resource modules for cheqd-node.
Patches
Node operators are requested to upgrade to cheqd-node v1.4.2. This is a non-state breaking release, and does not require a coordinated upgrade across all node operators.
Workarounds
No. Node operators are recommended to upgrade to the latest release version.
References
- Record
GHSA-7c94-gvvj-r3mg- Updated
- 2026-11-02
OSVNo score
cheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerability
Impact
This vulnerability affects the ibc-go package for those running full nodes, dubbed "Huckleberry". According to their advisory:
This issue is low-severity in general, and it has a low impact and likelihood of exploitation. Depending on how a full node is architected, this issue could potentially yield a high or critical severity vulnerability.
There is no vulnerability in the DID/resource modules for cheqd-node.
Patches
Node operators are requested to upgrade to cheqd-node v1.4.2. This is a non-state breaking release, and does not require a coordinated upgrade across all node operators.
Workarounds
No. Node operators are recommended to upgrade to the latest release version.
References
- Record
GHSA-7c94-gvvj-r3mg- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/cheqd/cheqd-node/security/advisories/GHSA-7c94-gvvj-r3mg
forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731