blob: c371965503ffbecf468c3f4b1d6bba38347219de [file] [log] [blame]
id: GO-2022-1066
modules:
- module: github.com/cheqd/cheqd-node
versions:
- fixed: 0.6.9
vulnerable_at: 0.6.8
summary: |-
Potential inter-blockchain communication (IBC) protocol compromise via
"Dragonberry" vulnerability in cheqd in github.com/cheqd/cheqd-node
ghsas:
- GHSA-j92c-mmf7-j5x5
references:
- advisory: https://github.com/cheqd/cheqd-node/security/advisories/GHSA-j92c-mmf7-j5x5
- web: https://forum.cosmos.network/t/ibc-security-advisory-dragonberry/7702/1
- web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.45.9
source:
id: GHSA-j92c-mmf7-j5x5
created: 2024-08-20T14:49:34.431692-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE