VDB
Sign up
—

GO-2024-2694

Potential Reentrancy using Timeout Callbacks in ibc-hooks in github.com/cosmos/ibc-go

Quick fix

GO-2024-2694 — github.com/cosmos/ibc-go/v4: upgrade to the fixed version with the command below.

go get github.com/cosmos/ibc-go/v4@v4.6.0

Details

Potential Reentrancy using Timeout Callbacks in ibc-hooks in github.com/cosmos/ibc-go

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cosmos/ibc-go
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go (go modules). Pin to a known-safe version or switch to an alternative.

Go/github.com/cosmos/ibc-go/v2
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go/v2 (go modules). Pin to a known-safe version or switch to an alternative.

Go/github.com/cosmos/ibc-go/v3
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go/v3 (go modules). Pin to a known-safe version or switch to an alternative.

Go/github.com/cosmos/ibc-go/v4
Introduced in: 0Fixed in: 4.6.0
Fixgo get github.com/cosmos/ibc-go/v4@v4.6.0
Go/github.com/cosmos/ibc-go/v5
Introduced in: 0Fixed in: 5.4.0
Fixgo get github.com/cosmos/ibc-go/v5@v5.4.0
Go/github.com/cosmos/ibc-go/v6
Introduced in: 0Fixed in: 6.3.0
Fixgo get github.com/cosmos/ibc-go/v6@v6.3.0
Go/github.com/cosmos/ibc-go/v7
Introduced in: 0Fixed in: 7.4.0
Fixgo get github.com/cosmos/ibc-go/v7@v7.4.0
Go/github.com/cosmos/ibc-go/v8
Introduced in: 0Fixed in: 8.2.0
Fixgo get github.com/cosmos/ibc-go/v8@v8.2.0

References