CosmWasm

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

CosmWasm records in CISA KEV

No CosmWasm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cosmwasm 1 record HIGH Cosmwasm-std 1 record LOW Serde-json-wasm 1 record LOW

Records

1 record in Cosmwasm · all components

TI-2025-19025 CVE-2025-25500 · GHSA-cg8r-jwg7-r2x4

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions…

HIGH 72

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2025-03-18 Fixed in 2.2.0 CWE-284

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0