7 Total advisories
7 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/CosmWasm/wasmvm/v2 is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
GHSA-mx2j-7cmv-353c
wasmvm: Malicious smart contract can slow down block production in github.com/CosmWasm/wasmvm
UNKNOWN
GO-2025-3449
wasmvm: Malicious smart contract can slow down block production
UNKNOWN
GHSA-23qp-3c2m-xx6w
Malicious smart contract can crash the chain in github.com/CosmWasm/wasmvm
UNKNOWN
GO-2025-3448
wasmvm: Malicious smart contract can crash the chain
UNKNOWN
GHSA-2q97-m5rc-p3gp
CosmWasm VM Incorrect metering
UNKNOWN
GHSA-vmqh-5232-v43r
Panic in wasmvm can slow down block production
MEDIUM 4.3
RUSTSEC-2024-0361
Gas mispricing in cosmwasm-vm
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes