{"id":"GHSA-qjcv-rx3v-7mvj","aliases":["GO-2024-2874"],"url":"https://o3.security/vulnerability/GHSA-qjcv-rx3v-7mvj","summary":"github.com/cosmos/ibc-go affected by IBC protocol \"Huckleberry\" vulnerability","details":"The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol \"Huckleberry\" vulnerability.","published":"2024-05-20T21:51:33Z","modified":"2024-05-23T16:07:38Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v7","fixedVersion":"7.0.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v6","fixedVersion":"6.1.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v5","fixedVersion":"5.2.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v5","fixedVersion":"5.3.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v4","fixedVersion":"4.1.3"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v4","fixedVersion":"4.2.2"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v4","fixedVersion":"4.3.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v4","fixedVersion":"4.4.1"},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v3","fixedVersion":null},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go/v2","fixedVersion":null},{"ecosystem":"Go","name":"github.com/cosmos/ibc-go","fixedVersion":null}],"fix":{"url":"https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc","label":"cosmos/ibc-go@c77f80f"},"references":[{"type":"WEB","url":"https://github.com/cosmos/ibc-go/issues/1532"},{"type":"WEB","url":"https://github.com/cosmos/ibc-go/commit/c77f80f812940fe3b93980d13a5cdd6980e907cc"},{"type":"WEB","url":"https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731"},{"type":"PACKAGE","url":"https://github.com/cosmos/ibc-go"},{"type":"WEB","url":"https://github.com/cosmos/ibc-go/releases/tag/v6.1.1"},{"type":"WEB","url":"https://pkg.go.dev/vuln/GO-2023-1860"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-05-23T16:07:38Z"}}