Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

x/vulndb: potential Go vuln in github.com/evmos/evmos/v11: GHSA-v6rw-hhgg-wc4x #2732

Closed
GoVulnBot opened this issue Apr 17, 2024 · 2 comments
Closed

x/vulndb: potential Go vuln in github.com/evmos/evmos/v11: GHSA-v6rw-hhgg-wc4x #2732

GoVulnBot opened this issue Apr 17, 2024 · 2 comments
Labels
triaged

Comments

@GoVulnBot
Copy link

In GitHub Security Advisory GHSA-v6rw-hhgg-wc4x, there is a vulnerability in the following Go packages or modules:

Unit Fixed Vulnerable Ranges
github.com/evmos/evmos/v11 12.0.0 < 12.0.0

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/evmos/evmos/v11
      versions:
        - fixed: 12.0.0
      packages:
        - package: github.com/evmos/evmos/v11
summary: Evmos vulnerable to DOS and transaction fee expropiation through Authz exploit in github.com/evmos/evmos/v11
ghsas:
    - GHSA-v6rw-hhgg-wc4x
references:
    - advisory: https://github.com/evmos/evmos/security/advisories/GHSA-v6rw-hhgg-wc4x
    - advisory: https://github.com/advisories/GHSA-v6rw-hhgg-wc4x
source:
    id: GHSA-v6rw-hhgg-wc4x
@jba jba self-assigned this Apr 19, 2024
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/590278 mentions this issue: data/reports: add 48 unreviewed reports

@jba jba removed their assignment Jun 4, 2024
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/590775 mentions this issue: data/reports: update GO-2024-2732

gopherbot pushed a commit that referenced this issue Jun 5, 2024
@tatianab @gopherbot
data/reports: update GO-2024-2732
b195240 
fix spelling

  - data/reports/GO-2024-2732.yaml

Updates #2732

Change-Id: I04e15bf95cdf87b5cc22923a02ea3a2d8d503444
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/590775
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
@GoVulnBot GoVulnBot mentioned this issue Jul 5, 2024
Closed
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
triaged
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@tatianab @gopherbot @jba @GoVulnBot