Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk

概要

参考情報

• cosmos/cosmos-sdk security advisory · ADVISORY
• cosmos/cosmos-sdk commit 0a98b65 · FIX
• cosmos/cosmos-sdk release v0.47.16 · WEB
• cosmos/cosmos-sdk release v0.50.12 · WEB

github.com/cosmos/cosmos-sdk のその他の脆弱性

• GO-2025-3803Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
• GHSA-p22h-3m2v-cmgh高Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
• GO-2025-3516Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
• GHSA-47ww-ff84-4jrg高Cosmos SDK: x/group can halt when erroring in EndBlocker
• GHSA-x5vx-95h7-rv4p高Cosmos SDK: Groups module can halt chain when handling a malicious proposal