Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk

Mô tả

Tham khảo

• cosmos/cosmos-sdk security advisory · ADVISORY
• cosmos/cosmos-sdk commit 0a98b65 · FIX
• cosmos/cosmos-sdk release v0.47.16 · WEB
• cosmos/cosmos-sdk release v0.50.12 · WEB

Lỗ hổng khác của github.com/cosmos/cosmos-sdk

• GO-2025-3803Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
• GHSA-p22h-3m2v-cmghCAOCosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt
• GO-2025-3516Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
• GHSA-47ww-ff84-4jrgCAOCosmos SDK: x/group can halt when erroring in EndBlocker
• GHSA-x5vx-95h7-rv4pCAOCosmos SDK: Groups module can halt chain when handling a malicious proposal