| id: GO-2024-2572 |
| modules: |
| - module: github.com/cosmos/cosmos-sdk |
| versions: |
| - fixed: 0.47.9 |
| - introduced: 0.50.0 |
| - fixed: 0.50.4 |
| vulnerable_at: 0.50.3 |
| packages: |
| - package: github.com/cosmos/cosmos-sdk/x/auth/vesting |
| symbols: |
| - msgServer.CreatePeriodicVestingAccount |
| summary: |- |
| Missing BlockedAddressed Validation in Vesting Module in |
| github.com/cosmos/cosmos-sdk |
| ghsas: |
| - GHSA-4j93-fm92-rp4m |
| references: |
| - advisory: https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-4j93-fm92-rp4m |
| - fix: https://github.com/cosmos/cosmos-sdk/commit/c05850241e2d615721e3492d15fee4e1deec082b |
| - web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9 |
| - web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.4 |
| source: |
| id: GHSA-4j93-fm92-rp4m |
| created: 2024-07-01T15:01:58.512805-04:00 |
| review_status: REVIEWED |
