CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2024-32873
Medium (4.3) in evmos evmos. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in github.com/evmos/evmos/v17 18.0.0.
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-682
- Published
- Modified
- Record from
- the NVD, synced
Affected
- evmos:evmos
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v17 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v16 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v15 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v14 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v13 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v12 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v11 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v10 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v9 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v8 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v7 | <18.0.0 | 18.0.0 |
| GHSA-pxv8-qhrh-jc7v | Go | github.com/evmos/evmos/v6 | <18.0.0 | 18.0.0 |
| GO-2024-2891 | Go | github.com/evmos/evmos | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v2 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v3 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v4 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v5 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v6 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v7 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v8 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v9 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v10 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v11 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v12 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v13 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v14 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v15 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v16 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v17 | all versions | no fix published |
| GO-2024-2891 | Go | github.com/evmos/evmos/v18 | <18.0.0 | 18.0.0 |
| GO-2024-2926 | Go | github.com/evmos/evmos | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v2 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v3 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v4 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v5 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v6 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v7 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v8 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v9 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v10 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v11 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v12 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v13 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v14 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v15 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v16 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v17 | all versions | no fix published |
| GO-2024-2926 | Go | github.com/evmos/evmos/v18 | <18.0.0 | 18.0.0 |
| GO-2024-2927 | Go | github.com/evmos/evmos | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v2 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v3 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v4 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v5 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v6 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v7 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v8 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v9 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v10 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v11 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v12 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v13 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v14 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v15 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v16 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v17 | all versions | no fix published |
| GO-2024-2927 | Go | github.com/evmos/evmos/v18 | <18.0.0 | 18.0.0 |