GitHub Advisoryadvisory · Go

GHSA-qjcv-rx3v-7mvj github.com/cosmos/ibc-go affected by IBC protocol "Huckleberry" vulnerability

MEDIUM Published 2024-05-20 Modified 2024-05-23 Official page ↗
Ecosystem
Go
Packages
github.com/cosmos/ibc-go/v7, github.com/cosmos/ibc-go/v6, github.com/cosmos/ibc-go/v5, github.com/cosmos/ibc-go/v4, github.com/cosmos/ibc-go/v3, github.com/cosmos/ibc-go/v2, github.com/cosmos/ibc-go
Severity
Moderate
Reviewed
2024-05-20

Affected packages

• Go github.com/cosmos/ibc-go/v7: < 7.0.1 → fixed in 7.0.1 • Go github.com/cosmos/ibc-go/v6: < 6.1.1 → fixed in 6.1.1 • Go github.com/cosmos/ibc-go/v5: < 5.2.1 → fixed in 5.2.1 • Go github.com/cosmos/ibc-go/v5: >= 5.3.0, < 5.3.1 → fixed in 5.3.1 • Go github.com/cosmos/ibc-go/v4: < 4.1.3 → fixed in 4.1.3 • Go github.com/cosmos/ibc-go/v4: >= 4.2.0, < 4.2.2 → fixed in 4.2.2 • Go github.com/cosmos/ibc-go/v4: >= 4.3.0, < 4.3.1 → fixed in 4.3.1 • Go github.com/cosmos/ibc-go/v4: >= 4.4.0, < 4.4.1 → fixed in 4.4.1 • Go github.com/cosmos/ibc-go/v3: <= 3.4.0 (no fix yet) • Go github.com/cosmos/ibc-go/v2: <= 2.5.0 (no fix yet) • Go github.com/cosmos/ibc-go: <= 1.5.0 (no fix yet)

Description

The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability.

References