x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-4j93-fm92-rp4m

[GoVulnBot]

In GitHub Security Advisory GHSA-4j93-fm92-rp4m, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/cosmos/cosmos-sdk	0.47.9	<= 0.47.8

Cross references:

• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: CVE-2021-41135 #255 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-23px-mw2p-46qm #2047 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-qfc5-6r3j-jj22 #1821
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk #1861
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-w5w5-2882-47pc #1881

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/cosmos/cosmos-sdk
      versions:
        - introduced: TODO (earliest fixed "0.47.9", vuln range "<= 0.47.8")
      packages:
        - package: github.com/cosmos/cosmos-sdk
    - module: github.com/cosmos/cosmos-sdk
      versions:
        - introduced: TODO (earliest fixed "0.50.4", vuln range ">= 0.50.0, <= 0.50.3")
      packages:
        - package: github.com/cosmos/cosmos-sdk
summary: 'ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module'
ghsas:
    - GHSA-4j93-fm92-rp4m
references:
    - advisory: https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-4j93-fm92-rp4m
    - web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9
    - web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.4
    - advisory: https://github.com/advisories/GHSA-4j93-fm92-rp4m

[gopherbot]

Change https://go.dev/cl/582535 mentions this issue: data/reports: batch add unreviewed reports

[gopherbot]

Change https://go.dev/cl/587835 mentions this issue: data/reports: add GO-2024-2572

[gopherbot]

Change https://go.dev/cl/595999 mentions this issue: data/reports: review 7 reports