GHSA-w6rp-vxj2-fjhr
Cosmos packet-forward-middleware vulnerable to chain-halt
GHSA-w6rp-vxj2-fjhr is a vulnerability with no CVSS score yet in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4, published October 26, 2023. No source lists public exploit code. Fixed in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4 4.1.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
Description
The Cosmos SDK is used for Inter-Blockchain Communication Protocol (IBC) applications and middleware. The packet-forward-middleware module is an IBC middleware module built for Cosmos blockchains utilizing the IBC protocol allowing routing of incoming IBC packets from a source chain to a destination chain. The packet-forward-middleware module is vulnerable to potential chain-halt due to error non-determinism.
Patches
Please patch at your earliest convenience by applying one of the following patch versions, respective to the chain's ibc-go major version: v4.1.1 v5.2.1 v6.1.1
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4Go | before 4.1.1 | 4.1.1 |
github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5Go | before 5.2.1 | 5.2.1 |
github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6Go | before 6.1.1 | 6.1.1 |
What each source reports
GitHub AdvisoriesNo score
Cosmos packet-forward-middleware vulnerable to chain-halt
The Cosmos SDK is used for Inter-Blockchain Communication Protocol (IBC) applications and middleware. The packet-forward-middleware module is an IBC middleware module built for Cosmos blockchains utilizing the IBC protocol allowing routing of incoming IBC packets from a source chain to a destination chain. The packet-forward-middleware module is vulnerable to potential chain-halt due to error non-determinism.
Patches
Please patch at your earliest convenience by applying one of the following patch versions, respective to the chain's ibc-go major version: v4.1.1 v5.2.1 v6.1.1
- Record
GHSA-w6rp-vxj2-fjhr- Updated
- 2026-11-02
OSVNo score
Cosmos packet-forward-middleware vulnerable to chain-halt
The Cosmos SDK is used for Inter-Blockchain Communication Protocol (IBC) applications and middleware. The packet-forward-middleware module is an IBC middleware module built for Cosmos blockchains utilizing the IBC protocol allowing routing of incoming IBC packets from a source chain to a destination chain. The packet-forward-middleware module is vulnerable to potential chain-halt due to error non-determinism.
Patches
Please patch at your earliest convenience by applying one of the following patch versions, respective to the chain's ibc-go major version: v4.1.1 v5.2.1 v6.1.1
- Record
GHSA-w6rp-vxj2-fjhr- Updated
- 2026-11-02
OSVGO-2023-2156No score
Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware
Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware
- Record
GO-2023-2156- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.