x/vulndb: potential Go vuln in github.com/tharsis/evmos/v5: GHSA-3fp5-2xwh-fxm6

[GoVulnBot]

In GitHub Security Advisory GHSA-3fp5-2xwh-fxm6, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/tharsis/evmos/v5		<= 5.0.1

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/tharsis/evmos/v5
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/tharsis/evmos/v4
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/tharsis/evmos/v3
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/tharsis/evmos/v2
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/tharsis/evmos
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v5
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v6
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v7
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v8
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v9
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v10
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v11
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v12
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v13
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v14
    - module: github.com/tharsis/evmos/v5
      versions:
        - {}
      vulnerable_at: 5.0.1
      packages:
        - package: github.com/evmos/evmos/v15
    - module: github.com/tharsis/evmos/v5
      versions:
        - introduced: TODO (earliest fixed "17.0.0", vuln range "<= 16.0.4")
      packages:
        - package: github.com/evmos/evmos/v16
summary: |-
    Evmos transaction execution not accounting for all state transition after
    interaction with precompiles
ghsas:
    - GHSA-3fp5-2xwh-fxm6
references:
    - advisory: https://github.com/evmos/evmos/security/advisories/GHSA-3fp5-2xwh-fxm6
    - web: https://github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/state_object.go#L53-L68
    - web: https://github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go#L33-L55
    - advisory: https://github.com/advisories/GHSA-3fp5-2xwh-fxm6

[gopherbot]

Change https://go.dev/cl/590278 mentions this issue: data/reports: add 48 unreviewed reports