Vendor
Cosmwasm
Products
3
CVEs
3
Across products
3
Status
Private
Products
3- 1 CVE
- 1 CVE
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-25500 | Hig | 0.49 | 7.5 | 0.01 | Mar 18, 2025 | An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the… | ||
| CVE-2024-58263 | Low | 0.17 | 3.7 | 0.00 | Jul 27, 2025 | The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations. | ||
| CVE-2024-58264 | Low | 0.14 | 3.2 | 0.00 | Jul 27, 2025 | The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data. |
- risk 0.49cvss 7.5epss 0.01
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the…
- risk 0.17cvss 3.7epss 0.00
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
- risk 0.14cvss 3.2epss 0.00
The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.