Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2024-3339" }
{ "imports": [ { "symbols": [ "Decoder.Decode", "RejectUnknownFields", "RejectUnknownFieldsStrict" ], "path": "cosmossdk.io/x/tx/decode" } ] }
{ "imports": [ { "symbols": [ "interfaceRegistry.UnpackAny" ], "path": "github.com/cosmos/cosmos-sdk/codec/types" }, { "symbols": [ "RejectUnknownFields", "RejectUnknownFieldsStrict" ], "path": "github.com/cosmos/cosmos-sdk/codec/unknownproto" } ] }