CWA-2024-007: Incorrect metering

Moderate

chipshort published GHSA-2q97-m5rc-p3gp

Dec 10, 2024

Package

cosmwasm-vm (Rust)

Affected versions

>= 2.1.0, < 2.1.4

>= 2.0.0, < 2.0.7

< 1.5.8

Patched versions

2.1.4

2.0.7

1.5.8

github.com/CosmWasm/wasmvm (Go)

< 1.5.5

1.5.5

github.com/CosmWasm/wasmvm/v2 (Go)

>= 2.1.0, < 2.1.3

>= 2.0.0, < 2.0.4

2.1.3

2.0.4

Description

See CWA-2024-007 for more details on how to patch this.