Affected Products

Vendor / product matrix with CVE counts sourced from the CPE catalog.

Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
cosmwasm
33035.4%HIGH

Related CVEs

3
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2024-58264The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.HIGH7.5—28.1%Jul 27, 2025
CVE-2024-58263The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.MEDIUM5.3—33.5%Jul 27, 2025
CVE-2025-25500An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain.HIGH7.5—48.3%Mar 18, 2025