From 7a6a21be6e46d4ea1c88bdd2bf773640eb0d704b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 23 Dec 2024 17:14:42 +0000 Subject: [PATCH] Publish Advisories GHSA-75qh-gg76-p2w4 GHSA-4cx5-89vm-833x GHSA-8wcc-m6j2-qxvm --- .../GHSA-75qh-gg76-p2w4.json | 6 ++- .../GHSA-4cx5-89vm-833x.json | 44 +++++++++++++------ .../GHSA-8wcc-m6j2-qxvm.json | 21 ++++++++- 3 files changed, 56 insertions(+), 15 deletions(-) diff --git a/advisories/github-reviewed/2024/08/GHSA-75qh-gg76-p2w4/GHSA-75qh-gg76-p2w4.json b/advisories/github-reviewed/2024/08/GHSA-75qh-gg76-p2w4/GHSA-75qh-gg76-p2w4.json index 11258d6c326..bd82309ef8e 100644 --- a/advisories/github-reviewed/2024/08/GHSA-75qh-gg76-p2w4/GHSA-75qh-gg76-p2w4.json +++ b/advisories/github-reviewed/2024/08/GHSA-75qh-gg76-p2w4/GHSA-75qh-gg76-p2w4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-75qh-gg76-p2w4", - "modified": "2024-08-27T19:55:40Z", + "modified": "2024-12-23T17:13:08Z", "published": "2024-08-27T19:55:40Z", "aliases": [], "summary": "CWA-2023-004: Excessive number of function parameters in compiled Wasm", @@ -179,6 +179,10 @@ "type": "WEB", "url": "https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2023-004.md" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-75qh-gg76-p2w4" + }, { "type": "WEB", "url": "https://rustsec.org/advisories/RUSTSEC-2024-0366.html" diff --git a/advisories/github-reviewed/2024/12/GHSA-4cx5-89vm-833x/GHSA-4cx5-89vm-833x.json b/advisories/github-reviewed/2024/12/GHSA-4cx5-89vm-833x/GHSA-4cx5-89vm-833x.json index e5af77b013c..f9496a0b5c5 100644 --- a/advisories/github-reviewed/2024/12/GHSA-4cx5-89vm-833x/GHSA-4cx5-89vm-833x.json +++ b/advisories/github-reviewed/2024/12/GHSA-4cx5-89vm-833x/GHSA-4cx5-89vm-833x.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4cx5-89vm-833x", - "modified": "2024-12-02T17:15:24Z", + "modified": "2024-12-23T17:13:27Z", "published": "2024-12-02T17:15:24Z", "aliases": [ "CVE-2024-52800" @@ -28,11 +28,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } }, { "package": { @@ -47,11 +50,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } }, { "package": { @@ -66,11 +72,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } }, { "package": { @@ -85,11 +94,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } }, { "package": { @@ -104,11 +116,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } }, { "package": { @@ -123,11 +138,14 @@ "introduced": "0" }, { - "last_affected": "1.26.1" + "fixed": "1.26.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.26.1" + } } ], "references": [ diff --git a/advisories/github-reviewed/2024/12/GHSA-8wcc-m6j2-qxvm/GHSA-8wcc-m6j2-qxvm.json b/advisories/github-reviewed/2024/12/GHSA-8wcc-m6j2-qxvm/GHSA-8wcc-m6j2-qxvm.json index 999876a6a5a..9386a7660e2 100644 --- a/advisories/github-reviewed/2024/12/GHSA-8wcc-m6j2-qxvm/GHSA-8wcc-m6j2-qxvm.json +++ b/advisories/github-reviewed/2024/12/GHSA-8wcc-m6j2-qxvm/GHSA-8wcc-m6j2-qxvm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8wcc-m6j2-qxvm", - "modified": "2024-12-16T19:33:30Z", + "modified": "2024-12-23T17:13:22Z", "published": "2024-12-16T19:33:30Z", "aliases": [], "summary": "ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion ", @@ -50,6 +50,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "cosmossdk.io/x/tx" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.13.7" + } + ] + } + ] } ], "references": [