| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/cosmos/cosmos-sdk | all versions |
If a transaction is sent to the x/crisis module to check an invariant, the ConstantFee parameter of the chain is not charged.
No patch will be released, as the package is planned to be deprecated and replaced.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free