—
GO-2024-3339
Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
Quick fix
GO-2024-3339 — cosmossdk.io/x/tx: upgrade to the fixed version with the command below.
go get cosmossdk.io/x/tx@v0.13.7Details
Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/cosmos/cosmos-sdk
Introduced in:
0Fixed in: 0.47.15Fix
go get github.com/cosmos/cosmos-sdk@v0.47.15References
- https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm[ADVISORY]
- https://github.com/cosmos/cosmos-sdk/commit/c6b1bdcd5628e3e425a3f02881d3c7db1d7af653[FIX]
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15[WEB]
- https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.11[WEB]