{"schema_version":"1.3.1","id":"GO-2024-2571","modified":"2024-05-23T16:09:24Z","published":"2024-05-22T20:35:43Z","aliases":["GHSA-2557-x9mg-76w8"],"summary":"Invalid block proposal in github.com/cosmos/cosmos-sdk","details":"Invalid block proposal in github.com/cosmos/cosmos-sdk","affected":[{"package":{"name":"github.com/cosmos/cosmos-sdk","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.47.9"},{"introduced":"0.50.0"},{"fixed":"0.50.4"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/cosmos/cosmos-sdk/baseapp","symbols":["DefaultProposalHandler.PrepareProposalHandler","NewBaseApp","NewDefaultProposalHandler"]}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2557-x9mg-76w8"},{"type":"FIX","url":"https://github.com/cosmos/cosmos-sdk/commit/fe32bcc1d65412c9b5737672956f0638c729ab7d"},{"type":"WEB","url":"https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9"},{"type":"WEB","url":"https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.4"}],"credits":[{"name":"@gitferry, @SebastianElvis, and @vitsalis"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2571","review_status":"REVIEWED"}}