-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v7 | go | < 7.2.1 | 7.2.1 |
| github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v8 | go | < 8.1.1 | 8.1.1 |
| github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4 | go | < 7.2.1 | |
| github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5 | go | < 7.2.1 | |
| github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6 | go | < 7.2.1 |
The vulnerability stems from improper escrow accounting during IBC packet forwarding. The release notes explicitly mention 'correct escrow accounting' fixes and reference movement between escrow accounts. Based on: