CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/03/2025 |
| GHSA-x5vx-95h7-rv4p | ALTO | Cosmos SDK: Groups module can halt chain when handling a malicious proposal | 20/02/2025 |
| GO-2024-3339 | Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk | 18/12/2024 |
| GHSA-8wcc-m6j2-qxvm | ALTO | ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion | 16/12/2024 |
| GO-2024-2572 | Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk | 28/05/2024 |
| GO-2024-2571 | Invalid block proposal in github.com/cosmos/cosmos-sdk | 22/05/2024 |
| GO-2024-2638 | ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk | 10/05/2024 |
| GHSA-95rx-m9m5-m94v | ALTO7.1 | ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions | 12/03/2024 |
| GO-2024-2584 | Slashing evasion in github.com/cosmos/cosmos-sdk | 05/03/2024 |
| GHSA-86h5-xcpx-cfqc | BASSO | ASA-2024-005: Potential slashing evasion during re-delegation | 27/02/2024 |
| GHSA-2557-x9mg-76w8 | MEDIO5.3 | ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool` | 21/02/2024 |
| GHSA-4j93-fm92-rp4m | MEDIO6.5 | ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module | 21/02/2024 |
| GHSA-23px-mw2p-46qm | MEDIO | Cosmos-SDK Cosmovisor component may be vulnerable to denial of service | 06/09/2023 |
| GHSA-j2cr-jc39-wpx5 | MEDIO | Barberry Security Advisory - regarding x/auth periodic vesting accounts | 07/07/2023 |
| GO-2023-1881 | The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk | 06/07/2023 |
| GO-2023-1821 | The x/crisis package does not cause chain halt in github.com/cosmos/cosmos-sdk | 05/07/2023 |