{"schema_version":"1.3.1","id":"GO-2025-3448","modified":"2025-03-18T15:14:32Z","published":"2025-02-05T23:27:45Z","aliases":["GHSA-23qp-3c2m-xx6w"],"summary":"Malicious smart contract can crash the chain in github.com/CosmWasm/wasmvm","details":"Malicious smart contract can crash the chain in github.com/CosmWasm/wasmvm","affected":[{"package":{"name":"github.com/CosmWasm/wasmvm","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.8"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/CosmWasm/wasmvm/internal/api"}]}},{"package":{"name":"github.com/CosmWasm/wasmvm/v2","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.6"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/CosmWasm/wasmvm/v2/internal/api"}]}},{"package":{"name":"github.com/CosmWasm/wasmvm/v2","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.1.5"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/CosmWasm/wasmvm/v2/internal/api"}]}},{"package":{"name":"github.com/CosmWasm/wasmvm/v2","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.2.2"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/CosmWasm/wasmvm/v2/internal/api"}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-23qp-3c2m-xx6w"},{"type":"FIX","url":"https://github.com/CosmWasm/wasmvm/commit/0aefa4c378457aeb3c07e7975b875be38872c56d"},{"type":"FIX","url":"https://github.com/CosmWasm/wasmvm/commit/1151bc6df7d02d1889b8da37cf8510eaf4198eea"},{"type":"FIX","url":"https://github.com/CosmWasm/wasmvm/commit/8d44a286fabc793a2fba93752e58cd0fd5b88a2d"},{"type":"FIX","url":"https://github.com/CosmWasm/wasmvm/commit/d4ff2adee44e6b9f7415a5dfbb3de745ab9b7678"},{"type":"WEB","url":"https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2025-001.md"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2025-3448","review_status":"REVIEWED"}}