x/vulndb: potential Go vuln in github.com/CosmWasm/wasmd: GHSA-fpgj-cr28-fvpx

[GoVulnBot]

Advisory GHSA-fpgj-cr28-fvpx references a vulnerability in the following Go modules:

Module
github.com/CosmWasm/wasmd

Description:
Component: wasmd
Criticality: Medium (ACMv1: I:Moderate; L:Likely)
Patched versions: wasmd 0.53.0

See CWA-2024-006 for more details.

References:

• ADVISORY: GHSA-fpgj-cr28-fvpx
• ADVISORY: GHSA-fpgj-cr28-fvpx
• FIX: CosmWasm/wasmd@db8981d
• WEB: https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-006.md

Cross references:

• github.com/CosmWasm/wasmd appears in 1 other report(s):
  • data/reports/GO-2024-3059.yaml (x/vulndb: potential Go vuln in github.com/CosmWasm/wasmd: GHSA-m3rh-cvr5-x6q4 #3059)

See doc/quickstart.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/CosmWasm/wasmd
      non_go_versions:
        - introduced: TODO (earliest fixed "0.53.0", vuln range "= 0.52.0")
      vulnerable_at: 0.53.0
summary: 'CWA-2024-006: wasmd non-deterministic module_query_safe query in github.com/CosmWasm/wasmd'
ghsas:
    - GHSA-fpgj-cr28-fvpx
references:
    - advisory: https://github.com/CosmWasm/wasmd/security/advisories/GHSA-fpgj-cr28-fvpx
    - advisory: https://github.com/advisories/GHSA-fpgj-cr28-fvpx
    - fix: https://github.com/CosmWasm/wasmd/commit/db8981db8419fc4daa042ce04e279efb53c4ff29
    - web: https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-006.md
source:
    id: GHSA-fpgj-cr28-fvpx
    created: 2024-08-21T19:01:14.049854223Z
review_status: UNREVIEWED

[gopherbot]

Change https://go.dev/cl/609141 mentions this issue: data/reports: add 21 unreviewed reports