{"schema_version":"1.3.1","id":"GO-2024-3279","modified":"2024-12-12T22:00:04Z","published":"2024-11-21T19:52:52Z","aliases":["GHSA-7225-m954-23v7"],"summary":"Mismatched bit-length validation in can lead to panic in cosmossdk.io/math","details":"Mismatched bit-length validation in can lead to panic in cosmossdk.io/math","affected":[{"package":{"name":"cosmossdk.io/math","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.4.0"}]}],"ecosystem_specific":{"imports":[{"path":"cosmossdk.io/math","symbols":["LegacyDec.Add","LegacyDec.AddMut","LegacyDec.ApproxRoot","LegacyDec.ApproxSqrt","LegacyDec.Ceil","LegacyDec.ImmutOp","LegacyDec.ImmutOpInt","LegacyDec.ImmutOpInt64","LegacyDec.Mul","LegacyDec.MulInt","LegacyDec.MulInt64","LegacyDec.MulInt64Mut","LegacyDec.MulIntMut","LegacyDec.MulMut","LegacyDec.MulRoundUp","LegacyDec.MulRoundUpMut","LegacyDec.MulTruncate","LegacyDec.MulTruncateMut","LegacyDec.Power","LegacyDec.PowerMut","LegacyDec.Quo","LegacyDec.QuoInt","LegacyDec.QuoInt64","LegacyDec.QuoMut","LegacyDec.QuoRoundUp","LegacyDec.QuoRoundupMut","LegacyDec.QuoTruncate","LegacyDec.QuoTruncateMut","LegacyDec.Sub","LegacyDec.SubMut","LegacyDec.Unmarshal","LegacyDec.UnmarshalAmino","LegacyDec.UnmarshalJSON","LegacyDecApproxEq","LegacyMustNewDecFromStr","LegacyNewDecFromStr"]}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-7225-m954-23v7"},{"type":"FIX","url":"https://github.com/cosmos/cosmos-sdk/commit/c6522a72a45c34897f9fc85d438c0b74d52f8862"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-3279","review_status":"REVIEWED"}}