VDB
Sign up
MEDIUM

GHSA-qjcv-rx3v-7mvj

github.com/cosmos/ibc-go affected by IBC protocol "Huckleberry" vulnerability

Quick fix

GHSA-qjcv-rx3v-7mvj — github.com/cosmos/ibc-go/v7: upgrade to the fixed version with the command below.

go get github.com/cosmos/ibc-go/v7@v7.0.1

Details

The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cosmos/ibc-go/v7
Introduced in: 0Fixed in: 7.0.1
Fixgo get github.com/cosmos/ibc-go/v7@v7.0.1
Go/github.com/cosmos/ibc-go/v6
Introduced in: 0Fixed in: 6.1.1
Fixgo get github.com/cosmos/ibc-go/v6@v6.1.1
Go/github.com/cosmos/ibc-go/v5
Introduced in: 0Fixed in: 5.2.1
Fixgo get github.com/cosmos/ibc-go/v5@v5.2.1
Go/github.com/cosmos/ibc-go/v5
Introduced in: 5.3.0Fixed in: 5.3.1
Fixgo get github.com/cosmos/ibc-go/v5@v5.3.1
Go/github.com/cosmos/ibc-go/v4
Introduced in: 0Fixed in: 4.1.3
Fixgo get github.com/cosmos/ibc-go/v4@v4.1.3
Go/github.com/cosmos/ibc-go/v4
Introduced in: 4.2.0Fixed in: 4.2.2
Fixgo get github.com/cosmos/ibc-go/v4@v4.2.2
Go/github.com/cosmos/ibc-go/v4
Introduced in: 4.3.0Fixed in: 4.3.1
Fixgo get github.com/cosmos/ibc-go/v4@v4.3.1
Go/github.com/cosmos/ibc-go/v4
Introduced in: 4.4.0Fixed in: 4.4.1
Fixgo get github.com/cosmos/ibc-go/v4@v4.4.1
Go/github.com/cosmos/ibc-go/v3
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go/v3 (go modules). Pin to a known-safe version or switch to an alternative.

Go/github.com/cosmos/ibc-go/v2
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go/v2 (go modules). Pin to a known-safe version or switch to an alternative.

Go/github.com/cosmos/ibc-go
Introduced in: 0

No fixed version published yet for github.com/cosmos/ibc-go (go modules). Pin to a known-safe version or switch to an alternative.

References