Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk

概要

参考情報

• cosmos/cosmos-sdk security advisory · ADVISORY
• cosmos/cosmos-sdk commit c058502 · FIX
• cosmos/cosmos-sdk release v0.47.9 · WEB
• cosmos/cosmos-sdk release v0.50.4 · WEB

github.com/cosmos/cosmos-sdk のその他の脆弱性

• GO-2025-3803Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
• GHSA-p22h-3m2v-cmgh高Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
• GO-2025-3516Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
• GHSA-47ww-ff84-4jrg高Cosmos SDK: x/group can halt when erroring in EndBlocker
• GO-2025-3476Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk