GO-2025-3449
- Source
- https://pkg.go.dev/vuln/GO-2025-3449
- Import Source
- https://vuln.go.dev/ID/GO-2025-3449.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2025-3449
- Aliases
- Published
- 2025-02-05T23:27:45Z
- Modified
- 2025-02-05T23:57:17.783878Z
- Summary
- wasmvm: Malicious smart contract can slow down block production in github.com/CosmWasm/wasmvm
- Details
-
wasmvm: Malicious smart contract can slow down block production in github.com/CosmWasm/wasmvm
- Database specific
{ "url": "https://pkg.go.dev/vuln/GO-2025-3449", "review_status": "UNREVIEWED" }- References
-
- https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-mx2j-7cmv-353c
- https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2025-002.md
- https://github.com/CosmWasm/cosmwasm/commit/2b7f2faa57a1efc8207455c37f87f1eee6035a27
- https://github.com/CosmWasm/cosmwasm/commit/a5d62f65b5eb947ebe40e2085b1c48a9d0a244d0
- https://github.com/CosmWasm/cosmwasm/commit/d6143b0aff16a39bbea4be37597d8e9d9b213d3b
- https://github.com/CosmWasm/cosmwasm/commit/f0c04c03cbe2557634c1bbcdc2ce203fe7caca58
Affected packages
Go / github.com/CosmWasm/wasmvm
Package
- Name
- github.com/CosmWasm/wasmvm
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/CosmWasm/wasmvm
Go / github.com/CosmWasm/wasmvm/v2
Package
- Name
- github.com/CosmWasm/wasmvm/v2
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/CosmWasm/wasmvm/v2