—
GO-2023-1860
IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go
Quick fix
GO-2023-1860 — github.com/cosmos/ibc-go/v7: upgrade to the fixed version with the command below.
go get github.com/cosmos/ibc-go/v7@v7.0.1Details
The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/cosmos/ibc-go/v7
Introduced in:
0Fixed in: 7.0.1Fix
go get github.com/cosmos/ibc-go/v7@v7.0.1Go/github.com/cosmos/ibc-go/v6
Introduced in:
0Fixed in: 6.1.1Fix
go get github.com/cosmos/ibc-go/v6@v6.1.1Go/github.com/cosmos/ibc-go/v5
Introduced in:
0Fixed in: 5.2.1Fix
go get github.com/cosmos/ibc-go/v5@v5.2.1Go/github.com/cosmos/ibc-go/v4
Introduced in:
0Fixed in: 4.1.3Fix
go get github.com/cosmos/ibc-go/v4@v4.1.3