Executive brief
The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk
Affected products
- Go github.com/cosmos/cosmos-sdk
Junglewise Threat Intelligence
GO-2023-1881 - The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk
Severity: info ยท Published 2023-07-06
Technologies: github.com/cosmos/cosmos-sdk (Go). Vendors: Go.
Related threats
- GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
- GO-2025-3516 - Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
- GO-2025-3476 - Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
- GO-2024-3339 - Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
- GO-2024-2572 - Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk