Start for Free
go

github.com/cosmos/cosmos-sdk

View on go registry
25 Total advisories
25 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 6.5
Go

CVE-2021-41135

Authz Module Non-Determinism
UNKNOWN
Go

GO-2025-3516

Cosmos SDK: x/group can halt when erroring in EndBlocker
UNKNOWN
Go

GHSA-p22h-3m2v-cmgh

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GO-2025-3803

Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
UNKNOWN
Go

GHSA-47ww-ff84-4jrg

Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
UNKNOWN
Go

GHSA-x5vx-95h7-rv4p

Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GO-2025-3476

Cosmos SDK: Groups module can halt chain when handling a malicious proposal
UNKNOWN
Go

GO-2024-3339

ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion

UNKNOWN
Go

GHSA-8wcc-m6j2-qxvm

Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GO-2024-2584

ASA-2024-005: Potential slashing evasion during re-delegation
MEDIUM 6.5
Go

GO-2024-2572

ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module
UNKNOWN
Go

GHSA-4j93-fm92-rp4m

Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk
MEDIUM 5.3
Go

GO-2024-2571

ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`
UNKNOWN
Go

GHSA-2557-x9mg-76w8

Invalid block proposal in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-95rx-m9m5-m94v

ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-86h5-xcpx-cfqc

Slashing evasion in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-w5w5-2882-47pc

The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-j2cr-jc39-wpx5

Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-qfc5-6r3j-jj22

The x/crisis package does not cause chain halt in github.com/cosmos/cosmos-sdk
HIGH 7.1
Go

GO-2024-2638

ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
UNKNOWN
Go

GHSA-j2cr-jc39-wpx5

Duplicate Advisory: Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk
UNKNOWN
Go

GHSA-23px-mw2p-46qm

Cosmos-SDK Cosmovisor component may be vulnerable to denial of service
UNKNOWN
Go

GO-2023-1881

github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee
UNKNOWN
Go

GO-2023-1821

Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt
UNKNOWN
Go

GHSA-w44m-8mv2-v78h

Barberry Security Advisory - regarding x/auth periodic vesting accounts

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes