{"id":"GO-2023-1860","aliases":[],"status":"published","title":"IBC protocol \"Huckleberry\" vulnerability in github.com/cosmos/ibc-go","description":"The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol \"Huckleberry\" vulnerability.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-06-15T20:52:26Z","modified":"2024-05-20T16:03:47Z","fixes":[{"ecosystem":"Go","package":"github.com/cosmos/ibc-go/v7","fixed_in":["7.0.1"],"sources":["osv"]},{"ecosystem":"Go","package":"github.com/cosmos/ibc-go/v6","fixed_in":["6.1.1"],"sources":["osv"]},{"ecosystem":"Go","package":"github.com/cosmos/ibc-go/v5","fixed_in":["5.2.1","5.3.1"],"sources":["osv"]},{"ecosystem":"Go","package":"github.com/cosmos/ibc-go/v4","fixed_in":["4.1.3","4.2.2","4.3.1","4.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Go","package":"github.com/cosmos/ibc-go/v7","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.0.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cosmos/ibc-go/v6","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cosmos/ibc-go/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.2.1"},{"introduced":"5.3.0"},{"fixed":"5.3.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cosmos/ibc-go/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.3"},{"introduced":"4.2.0"},{"fixed":"4.2.2"},{"introduced":"4.3.0"},{"fixed":"4.3.1"},{"introduced":"4.4.0"},{"fixed":"4.4.1"}]}]}],"references":[{"url":"https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731","tags":["advisory"]}],"sources":{"osv":[{"id":"GO-2023-1860","title":"IBC protocol \"Huckleberry\" vulnerability in github.com/cosmos/ibc-go","description":"The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol \"Huckleberry\" vulnerability.","status":"published","published":"2023-06-15T20:52:26Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}