cosmos github.com/cosmos/interchain-security/v5 vulnerabilities

Latest cosmos github.com/cosmos/interchain-security/v5 CVEs

Newest publication first

1. GHSA-7q74-g774-7x3g Interchain Security: The signers of ICS messages do not need to match the provider address

   Published 2024-09-05

   Unknown

   Context ICS has the following four messages that enable validators on the provider chain to perform different actions: MsgOptIn -- adds a validator to the consumer chain’s active set MsgOptOut -- removes a validator from the consumer chain’s active set MsgAssignConsumerKey -- cha...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.