{"schema_version":1,"title":"github.com/cosmos/cosmos-sdk (Go) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in github.com/cosmos/cosmos-sdk (Go): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool…, was published on 28 July 2025.","url":"https://junglewise.ai/threats/technologies/github-com-cosmos-cosmos-sdk","json_url":"https://junglewise.ai/threats/technologies/github-com-cosmos-cosmos-sdk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/github-com-cosmos-cosmos-sdk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"slug":"go-2025-3803-integer-overflow-vulnerability-in-its-validator-rewards-443268ef","title":"GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2025-07-28T19:57:01+00:00","url":"https://junglewise.ai/threats/go-2025-3803-integer-overflow-vulnerability-in-its-validator-rewards-443268ef"},{"slug":"go-2025-3516-cosmos-sdk-can-halt-when-erroring-in-endblocker-in-github-acb61f85","title":"GO-2025-3516 - Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/","severity":"info","exploited":false,"published_at":"2025-03-18T15:59:55+00:00","url":"https://junglewise.ai/threats/go-2025-3516-cosmos-sdk-can-halt-when-erroring-in-endblocker-in-github-acb61f85"},{"slug":"go-2025-3476-cosmos-sdk-groups-module-can-halt-chain-when-handling-a-8fbcfc70","title":"GO-2025-3476 - Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2025-03-03T16:11:01+00:00","url":"https://junglewise.ai/threats/go-2025-3476-cosmos-sdk-groups-module-can-halt-chain-when-handling-a-8fbcfc70"},{"slug":"go-2024-3339-transaction-decoding-may-result-in-a-stack-overflow-or-695769a3","title":"GO-2024-3339 - Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-12-18T16:35:57+00:00","url":"https://junglewise.ai/threats/go-2024-3339-transaction-decoding-may-result-in-a-stack-overflow-or-695769a3"},{"slug":"go-2024-2572-missing-blockedaddressed-validation-in-vesting-module-in-e2356024","title":"GO-2024-2572 - Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-28T16:10:17+00:00","url":"https://junglewise.ai/threats/go-2024-2572-missing-blockedaddressed-validation-in-vesting-module-in-e2356024"},{"slug":"go-2024-2571-invalid-block-proposal-in-github-com-cosmos-cosmos-sdk-e7faad9d","title":"GO-2024-2571 - Invalid block proposal in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-22T20:35:43+00:00","url":"https://junglewise.ai/threats/go-2024-2571-invalid-block-proposal-in-github-com-cosmos-cosmos-sdk-e7faad9d"},{"slug":"go-2024-2638-validatevoteextensions-function-in-cosmos-sdk-may-allow-7ad2177d","title":"GO-2024-2638 - ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-10T21:39:27+00:00","url":"https://junglewise.ai/threats/go-2024-2638-validatevoteextensions-function-in-cosmos-sdk-may-allow-7ad2177d"},{"cvss":3.1,"slug":"asa-2024-006-validatevoteextensions-helper-function-in-cosmos-sdk-may-e6f2ede6","title":"ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions","severity":"low","exploited":false,"published_at":"2024-03-12T15:50:23+00:00","url":"https://junglewise.ai/threats/asa-2024-006-validatevoteextensions-helper-function-in-cosmos-sdk-may-e6f2ede6"},{"slug":"go-2024-2584-slashing-evasion-in-github-com-cosmos-cosmos-sdk-89a04e09","title":"GO-2024-2584 - Slashing evasion in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-03-05T19:43:51+00:00","url":"https://junglewise.ai/threats/go-2024-2584-slashing-evasion-in-github-com-cosmos-cosmos-sdk-89a04e09"},{"slug":"cosmos-sdk-cosmovisor-component-may-be-vulnerable-to-denial-of-service-cdfa7446","title":"Cosmos-SDK Cosmovisor component may be vulnerable to denial of service","severity":"info","exploited":false,"published_at":"2023-09-06T20:49:54+00:00","url":"https://junglewise.ai/threats/cosmos-sdk-cosmovisor-component-may-be-vulnerable-to-denial-of-service-cdfa7446"},{"slug":"go-2023-1881-the-x-crisis-package-does-not-charge-constantfee-in-github-7eacdf3f","title":"GO-2023-1881 - The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2023-07-06T20:13:03+00:00","url":"https://junglewise.ai/threats/go-2023-1881-the-x-crisis-package-does-not-charge-constantfee-in-github-7eacdf3f"},{"slug":"go-2023-1821-the-x-crisis-package-does-not-cause-chain-halt-in-github-07715067","title":"GO-2023-1821 - The x/crisis package does not cause chain halt in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2023-07-05T17:29:41+00:00","url":"https://junglewise.ai/threats/go-2023-1821-the-x-crisis-package-does-not-cause-chain-halt-in-github-07715067"},{"slug":"github-com-cosmos-cosmos-sdk-s-x-crisis-does-not-charge-constantfee-bb14252f","title":"github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee","severity":"info","exploited":false,"published_at":"2023-06-30T22:13:02+00:00","url":"https://junglewise.ai/threats/github-com-cosmos-cosmos-sdk-s-x-crisis-does-not-charge-constantfee-bb14252f"},{"slug":"go-2023-1861-cosmos-barberry-vulnerability-in-github-com-cosmos-cosmos-f89eed67","title":"GO-2023-1861 - Cosmos \"Barberry\" vulnerability in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2023-06-22T16:36:04+00:00","url":"https://junglewise.ai/threats/go-2023-1861-cosmos-barberry-vulnerability-in-github-com-cosmos-cosmos-f89eed67"},{"slug":"go-package-github-com-cosmos-cosmos-sdk-module-x-crisis-does-not-cause-1ee5b3e1","title":"Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt","severity":"info","exploited":false,"published_at":"2023-06-02T17:11:58+00:00","url":"https://junglewise.ai/threats/go-package-github-com-cosmos-cosmos-sdk-module-x-crisis-does-not-cause-1ee5b3e1"},{"cve":"CVE-2021-41135","cvss":3.1,"epss":0.0171,"slug":"cve-2021-41135-authz-module-non-determinism","title":"Authz Module Non-Determinism","severity":"low","exploited":false,"published_at":"2021-10-21T17:46:57+00:00","url":"https://junglewise.ai/threats/cve-2021-41135-authz-module-non-determinism"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"github.com/mattermost/mattermost-server (Go)","slug":"github-com-mattermost-mattermost-server","vulnerabilities":274,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server"},{"name":"github.com/mattermost/mattermost-server/v6 (Go)","slug":"github-com-mattermost-mattermost-server-v6","vulnerabilities":188,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6"},{"name":"github.com/mattermost/mattermost-server/v5 (Go)","slug":"github-com-mattermost-mattermost-server-v5","vulnerabilities":186,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5"},{"name":"github.com/mattermost/mattermost/server/v8 (Go)","slug":"github-com-mattermost-mattermost-server-v8","vulnerabilities":182,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8"},{"name":"stdlib (Go)","slug":"go-stdlib","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/go-stdlib"},{"name":"github.com/siyuan-note/siyuan/kernel (Go)","slug":"github-com-siyuan-note-siyuan-kernel","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel"},{"name":"code.gitea.io/gitea (Go)","slug":"code-gitea-io-gitea","vulnerabilities":128,"url":"https://junglewise.ai/threats/technologies/code-gitea-io-gitea"},{"name":"gogs.io/gogs (Go)","slug":"gogs-io-gogs","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/gogs-io-gogs"},{"name":"github.com/traefik/traefik (Go)","slug":"github-com-traefik-traefik","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik"},{"name":"github.com/usememos/memos (Go)","slug":"github-com-usememos-memos","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-usememos-memos"},{"name":"github.com/traefik/traefik/v2 (Go)","slug":"github-com-traefik-traefik-v2","vulnerabilities":73,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2"},{"name":"github.com/traefik/traefik/v3 (Go)","slug":"github-com-traefik-traefik-v3","vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v3"}],"technology":{"hub":true,"name":"github.com/cosmos/cosmos-sdk (Go)","slug":"github-com-cosmos-cosmos-sdk","vendor":{"name":"Go","slug":"go","url":"https://junglewise.ai/threats/vendors/go"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/github-com-cosmos-cosmos-sdk"},"most_severe":[{"cve":"CVE-2021-41135","cvss":3.1,"epss":0.0171,"slug":"cve-2021-41135-authz-module-non-determinism","title":"Authz Module Non-Determinism","severity":"low","exploited":false,"published_at":"2021-10-21T17:46:57+00:00","url":"https://junglewise.ai/threats/cve-2021-41135-authz-module-non-determinism"},{"cvss":3.1,"slug":"asa-2024-006-validatevoteextensions-helper-function-in-cosmos-sdk-may-e6f2ede6","title":"ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions","severity":"low","exploited":false,"published_at":"2024-03-12T15:50:23+00:00","url":"https://junglewise.ai/threats/asa-2024-006-validatevoteextensions-helper-function-in-cosmos-sdk-may-e6f2ede6"},{"slug":"go-2025-3803-integer-overflow-vulnerability-in-its-validator-rewards-443268ef","title":"GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2025-07-28T19:57:01+00:00","url":"https://junglewise.ai/threats/go-2025-3803-integer-overflow-vulnerability-in-its-validator-rewards-443268ef"},{"slug":"go-2025-3516-cosmos-sdk-can-halt-when-erroring-in-endblocker-in-github-acb61f85","title":"GO-2025-3516 - Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/","severity":"info","exploited":false,"published_at":"2025-03-18T15:59:55+00:00","url":"https://junglewise.ai/threats/go-2025-3516-cosmos-sdk-can-halt-when-erroring-in-endblocker-in-github-acb61f85"},{"slug":"go-2025-3476-cosmos-sdk-groups-module-can-halt-chain-when-handling-a-8fbcfc70","title":"GO-2025-3476 - Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2025-03-03T16:11:01+00:00","url":"https://junglewise.ai/threats/go-2025-3476-cosmos-sdk-groups-module-can-halt-chain-when-handling-a-8fbcfc70"},{"slug":"go-2024-3339-transaction-decoding-may-result-in-a-stack-overflow-or-695769a3","title":"GO-2024-3339 - Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-12-18T16:35:57+00:00","url":"https://junglewise.ai/threats/go-2024-3339-transaction-decoding-may-result-in-a-stack-overflow-or-695769a3"},{"slug":"go-2024-2572-missing-blockedaddressed-validation-in-vesting-module-in-e2356024","title":"GO-2024-2572 - Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-28T16:10:17+00:00","url":"https://junglewise.ai/threats/go-2024-2572-missing-blockedaddressed-validation-in-vesting-module-in-e2356024"},{"slug":"go-2024-2571-invalid-block-proposal-in-github-com-cosmos-cosmos-sdk-e7faad9d","title":"GO-2024-2571 - Invalid block proposal in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-22T20:35:43+00:00","url":"https://junglewise.ai/threats/go-2024-2571-invalid-block-proposal-in-github-com-cosmos-cosmos-sdk-e7faad9d"},{"slug":"go-2024-2638-validatevoteextensions-function-in-cosmos-sdk-may-allow-7ad2177d","title":"GO-2024-2638 - ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-05-10T21:39:27+00:00","url":"https://junglewise.ai/threats/go-2024-2638-validatevoteextensions-function-in-cosmos-sdk-may-allow-7ad2177d"},{"slug":"go-2024-2584-slashing-evasion-in-github-com-cosmos-cosmos-sdk-89a04e09","title":"GO-2024-2584 - Slashing evasion in github.com/cosmos/cosmos-sdk","severity":"info","exploited":false,"published_at":"2024-03-05T19:43:51+00:00","url":"https://junglewise.ai/threats/go-2024-2584-slashing-evasion-in-github-com-cosmos-cosmos-sdk-89a04e09"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}