Executive brief
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Affected products
- Go github.com/cosmos/cosmos-sdk
Junglewise Threat Intelligence
GO-2025-3476 - Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Severity: info · Published 2025-03-03
Technologies: github.com/cosmos/cosmos-sdk (Go). Vendors: Go.
Related threats
- GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
- GO-2025-3516 - Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
- GO-2024-3339 - Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
- GO-2024-2572 - Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk
- GO-2024-2571 - Invalid block proposal in github.com/cosmos/cosmos-sdk