cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-MX2J-7CMV-353C...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: GHSA-MX2J-7CMV-353C...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q97-M5RC-P3GP...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: GHSA-2Q97-M5RC-P3GP...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-VMQH-5232-V43R...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: GHSA-VMQH-5232-V43R...

PT-2024-40482 · Wasmvm +1 · Wasmvm +1

Name of the Vulnerable Software and Affected Versions: wasmvm versions 2.1.0 through 2.1.2 wasmvm versions 2.0.0 through 2.0.3 wasmvm versions prior to 1.5.5 cosmwasm-vm versions 2.1.0 through 2.1.3 cosmwasm-vm versions 2.0.0 through 2.0.6 cosmwasm-vm versions prior to 1.5.8 Description: The issu...

CosmWasm VM Incorrect metering

CWA-2024-007 Severity Medium Moderate + Likely^1 Affected versions: - wasmvm = 2.1.0, = 2.0.0, = 2.1.0, = 2.0.0, query wasm libwasmvm-version. It must show 1.5...

CosmWasm VM Incorrect metering

CWA-2024-007 Severity Medium Moderate + Likely^1 Affected versions: - wasmvm = 2.1.0, = 2.0.0, = 2.1.0, = 2.0.0, query wasm libwasmvm-version. It must show 1.5...

PT-2024-40031 · Wasmvm +1 · Wasmvm +1

Name of the Vulnerable Software and Affected Versions: wasmvm versions 2.1.0 through 2.1.2 wasmvm versions 2.0.0 through 2.0.3 wasmvm versions prior to 1.5.5 cosmwasm-vm versions 2.1.0 through 2.1.3 cosmwasm-vm versions 2.0.0 through 2.0.6 cosmwasm-vm versions prior to 1.5.8 Description: The issu...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: GHSA-RG2Q-2JH9-447Q...

RUSTSEC-2024-0361 CWA-2024-004: Gas mispricing in cosmwasm-vm

Some Wasm operations take significantly more gas than our benchmarks indicated. This can lead to missing the gas target we defined by a factor of 10x. This means a malicious contract could take 10 times as much time to execute as expected, which can be used to temporarily DoS a chain. For more...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +2 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =1.3.4 - cw-check-contract 1.0.1 - cw-desmos-dummy-tokenomics 0.0.3 - cw-desmos-filter-posts 0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0361...

Gas mispricing in cosmwasm-vm

Component: wasmvm Criticality: Medium ACMv1: I:Moderate; L:Likely Patched versions: wasmvm 1.5.3, 2.0.2, 2.1.1...

Gas mispricing in cosmwasm-vm

Component: wasmvm Criticality: Medium ACMv1: I:Moderate; L:Likely Patched versions: wasmvm 1.5.3, 2.0.2, 2.1.1...

PT-2024-40902

Name of the Vulnerable Software and Affected Versions cosmwasm affected versions not specified Description The issue concerns the cosmwasm crate, which has not been used since spring 2020. Its functionality was split into multiple crates, including cosmwasm-std and cosmwasm-vm. If cosmwasm is fou...