GO-2024-2891
evmos allows transferring unvested tokens after delegations in github.com/evmos/evmos
Quick fix
GO-2024-2891 — github.com/evmos/evmos/v18: upgrade to the fixed version with the command below.
go get github.com/evmos/evmos/v18@v18.0.0Details
evmos allows transferring unvested tokens after delegations in github.com/evmos/evmos
Are you affected?
Enter the version of the package you're using.
Affected packages
0No fixed version published yet for github.com/evmos/evmos (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v2 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v3 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v4 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v5 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v6 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v7 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v8 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v9 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v10 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v11 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v12 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v13 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v14 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v15 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v16 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/evmos/evmos/v17 (go modules). Pin to a known-safe version or switch to an alternative.
0Fixed in: 18.0.0go get github.com/evmos/evmos/v18@v18.0.0References
- https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7v[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-32873[ADVISORY]
- https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb[FIX]
- https://nvd.nist.gov/vuln/detail/CVE-2024-37158[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2024-37159[WEB]