Evmos vulnerable to unauthorized account creation with vesting module in github.com/evmos/evmos

Description

References

• evmos/evmos security advisory · ADVISORY

More vulnerabilities in github.com/evmos/evmos

• CVE-2024-39696HIGH 8.1Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account …
• CVE-2024-37154MEDIUM 5.3Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This…
• CVE-2024-37153HIGH 7.5Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is…
• CVE-2024-32873MEDIUM 4.3Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested …
• GO-2024-2732Evmos vulnerable to DOS and transaction fee expropriation through Authz exploit in github.com/evmos/evmos