github.com/cosmos/cosmos-sdk vulnerabilities (Go)
13 vulnerabilities.
-
github.com/cosmos/cosmos-sdkGo Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt 7.7 High -
github.com/cosmos/cosmos-sdkGo Cosmos SDK: x/group can halt when erroring in EndBlocker 8.7 High -
github.com/cosmos/cosmos-sdkGo Cosmos SDK: Groups module can halt chain when handling a malicious proposal 8.7 High -
github.com/cosmos/cosmos-sdkGo ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion 8.7 High -
github.com/cosmos/cosmos-sdkGo ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions 7.1 High -
github.com/cosmos/cosmos-sdkGo ASA-2024-005: Potential slashing evasion during re-delegation No score -
github.com/cosmos/cosmos-sdkGo ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool` 5.3 Medium -
github.com/cosmos/cosmos-sdkGo ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module 6.5 Medium -
github.com/cosmos/cosmos-sdkGo Cosmos-SDK Cosmovisor component may be vulnerable to denial of service No score -
github.com/cosmos/cosmos-sdkGo github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee No score -
github.com/cosmos/cosmos-sdkGo Barberry Security Advisory - regarding x/auth periodic vesting accounts No score -
github.com/cosmos/cosmos-sdkGo Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt No score -
github.com/cosmos/cosmos-sdkGo Authz Module Non-Determinism 6.5 Medium