Vulnerability Report: GO-2025-3463

Affected Packages

• Path
  Go Versions
  Symbols
• github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v7/packetforward
  before v7.2.1
  • AppModule.ConsensusVersion
  • AppModule.RegisterServices
  • Keeper.WriteAcknowledgementForForwardedPacket
• github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v8/packetforward
  before v8.1.1
  • AppModule.ConsensusVersion
  • AppModule.RegisterServices
  • Keeper.WriteAcknowledgementForForwardedPacket

Affected Modules

• Path
  Go Versions
• github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4
  all versions, no known fixed
• github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5
  all versions, no known fixed
• github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6
  all versions, no known fixed

Aliases

• GHSA-6fgm-x6ff-w78f

References

• https://github.com/cosmos/ibc-apps/security/advisories/GHSA-6fgm-x6ff-w78f
• https://github.com/cosmos/ibc-apps/releases/tag/middleware%2Fpacket-forward-middleware%2Fv7.2.1
• https://github.com/cosmos/ibc-apps/releases/tag/middleware%2Fpacket-forward-middleware%2Fv8.1.1
• https://vuln.go.dev/ID/GO-2025-3463.json

Feedback