Vulnerabilities

TI-2024-38365 CVE-2024-58264 · GHSA-rr69-rxr6-8qwf

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

LOW 34

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00547 Published 2025-07-27 Fixed in 0.5.2, 1.0.1 CWE-674

TI-2024-38364 CVE-2024-58263 · GHSA-8724-5xmm-w5xq

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

LOW 25

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00496 Published 2025-07-27 Fixed in 1.4.4, 1.5.4 +1 CWE-190

TI-2025-19025 CVE-2025-25500 · GHSA-cg8r-jwg7-r2x4

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions…

HIGH 72

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2025-03-18 Fixed in 2.2.0 CWE-284

Vulnerabilities

Filters

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions…