GO-2023-1860
IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go
No scoreFix available
The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.
What each source reports
OSV No score
IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go
The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.
- Record
GO-2023-1860- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/cosmos/ibc-go/v7Go |
before 7.0.1 | 7.0.1 |
github.com/cosmos/ibc-go/v6Go |
before 6.1.1 | 6.1.1 |
github.com/cosmos/ibc-go/v5Go |
before 5.2.1, 5.3.0 up to 5.3.1 | 5.2.15.3.1 |
github.com/cosmos/ibc-go/v4Go |
before 4.1.3, 4.2.0 up to 4.2.2, 4.3.0 up to 4.3.1, 4.4.0 up to 4.4.1 | 4.1.34.2.24.3.14.4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GO-2023-1860 is a vulnerability with no CVSS score yet in github.com/cosmos/ibc-go/v7, published June 15, 2023. No source lists public exploit code. Fixed in github.com/cosmos/ibc-go/v7 7.0.1.