PT-2023-32988 · Unknown+1 · Cheqd-Node+1

Published 2023-06-05 · Updated 2023-06-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ibc-go versions prior to v6.1.1 cheqd-node versions prior to v1.4.2

Description This issue has a low severity in general, with low impact and likelihood of exploitation. However, depending on the full node architecture, it could potentially yield a high or critical severity issue. The vulnerability affects the ibc-go package for those running full nodes.

Recommendations For ibc-go versions prior to v6.1.1, upgrade to v6.1.1 or later. For cheqd-node versions prior to v1.4.2, upgrade to v1.4.2 or later.

Related Identifiers

GHSA-7C94-GVVJ-R3MG

Affected Products

Cheqd-Node

Ibc-Go

References · 7

• https://osv.dev/vulnerability/GHSA-7c94-gvvj-r3mg · Vendor Advisory
• https://github.com/cosmos/ibc-go/releases/tag/v6.1.1 · Note
• https://github.com/cheqd/cheqd-node · Note
• https://github.com/cheqd/cheqd-node/commit/f325f5f250e150e3e76a5a557669f67b606e34e1 · Note
• https://github.com/cheqd/cheqd-node/security/advisories/GHSA-7c94-gvvj-r3mg · Note
• https://github.com/cheqd/cheqd-node/releases/tag/v1.4.2 · Note
• https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731 · Note