Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/evmos/evmos/v10

7 known vulnerabilities (1 critical, 2 high, 1 medium, 3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 critical, 2 high, 1 medium, 3 low
Registry
pkg.go.dev

Advisories 7

  • Evmos vulnerable to exploit of smart contract account and vesting

    Affected: all versions.

  • Evmos is missing create validator check

    Affected: all versions; fixed in 18.0.0.

  • Evmos is missing precompile checks

    Affected: all versions; fixed in 18.0.0.

  • CVE-2024-37154Medium 5.3

    Evmos allows unvested token delegations

    Affected: through 10.0.1; all versions.

  • Evmos's contract balance not updating correctly after interchain transaction

    Affected: fixed in 18.1.0; all versions.

  • evmos allows transferring unvested tokens after delegations

    Affected: all versions; fixed in 18.0.0.

  • CVE-2024-32644Critical 9.1

    Evmos' transaction execution not accounting for all state transition after interaction with precompiles

    Affected: all versions.