—
GO-2022-0813
Authentication bypass by capture-replay in github.com/cosmos/ethermint
Quick fix
GO-2022-0813 — github.com/cosmos/ethermint: upgrade to the fixed version with the command below.
go get github.com/cosmos/ethermint@v0.4.1Details
Authentication bypass by capture-replay in github.com/cosmos/ethermint
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/cosmos/ethermint
Introduced in:
0Fixed in: 0.4.1Fix
go get github.com/cosmos/ethermint@v0.4.1References
- https://github.com/advisories/GHSA-93p5-8fqw-wjx3[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2021-25834[ADVISORY]
- https://github.com/cosmos/ethermint/commit/d7bdbd7488644f0aaeee5cdcdc119c863f199f72[FIX]
- https://github.com/cosmos/ethermint/issues/686[REPORT]
- https://github.com/cosmos/ethermint/releases/tag/v0.4.1[WEB]