Security Advisories for github.com/Cosmos/Cosmos-SDK in go
High
12 months ago
Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
go
github.com/cosmos/cosmos-sdk
High
over 1 year ago
Cosmos SDK: x/group can halt when erroring in EndBlocker
go
github.com/cosmos/cosmos-sdk
High
over 1 year ago
Cosmos SDK: Groups module can halt chain when handling a malicious proposal
go
github.com/cosmos/cosmos-sdk
High
over 1 year ago
ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion
go
github.com/cosmos/cosmos-sdk
Potential
High
over 1 year ago
ASA-2024-010: cosmossdk.io/math: Mismatched bit-length validation in sdk.Int and sdk.Dec can lead to panic
go
cosmossdk.io/math
High
over 2 years ago
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
go
github.com/cosmos/cosmos-sdk
Low
over 2 years ago
ASA-2024-005: Potential slashing evasion during re-delegation
go
github.com/cosmos/cosmos-sdk
Moderate
over 2 years ago
ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`
go
github.com/cosmos/cosmos-sdk
Moderate
over 2 years ago
ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module
go
github.com/cosmos/cosmos-sdk
Moderate
almost 3 years ago
Cosmos-SDK Cosmovisor component may be vulnerable to denial of service
go
github.com/cosmos/cosmos-sdk
Moderate
almost 3 years ago
Barberry Security Advisory - regarding x/auth periodic vesting accounts
go
github.com/cosmos/cosmos-sdk
Low
almost 3 years ago
github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee
go
github.com/cosmos/cosmos-sdk
Low
about 3 years ago
Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt
go
github.com/cosmos/cosmos-sdk