Vendors / CosmWasm Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now CosmWasm records in CISA KEV No CosmWasm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.008 · Published 2025-03-18 · Fixed in 2.2.0 CWE-284
Priority LOW 34
The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00547 · Published 2025-07-27 · Fixed in 0.5.2, 1.0.1 CWE-674
Priority LOW 25
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00496 · Published 2025-07-27 · Fixed in 1.4.4, 1.5.4 +1 CWE-190
Open these records in search → All records by CVSS severity
0 2 1 0 0
