Vendor archive

cosmwasm CVEs

Beta · best-effort

3 CVEs tagged to vendor cosmwasm — 0 Critical, 1 High, 0 Medium, 2 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-58264

Published Jul 27, 2025

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

CVSS 3.2 · Low

Vendor/product tagsBeta · best-effort

CVE-2024-58263

Published Jul 27, 2025

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

CVSS 3.7 · Low

Vendor/product tagsBeta · best-effort

CVE-2025-25500

Published Mar 18, 2025

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers…

CVSS 7.5 · High

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1