x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-86h5-xcpx-cfqc

[GoVulnBot]

In GitHub Security Advisory GHSA-86h5-xcpx-cfqc, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/cosmos/cosmos-sdk	0.47.10	<= 0.47.9

Cross references:

• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: CVE-2021-41135 #255 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-23px-mw2p-46qm #2047 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-qfc5-6r3j-jj22 #1821
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk #1861
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-w5w5-2882-47pc #1881

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/cosmos/cosmos-sdk
      versions:
        - introduced: TODO (earliest fixed "0.47.10", vuln range "<= 0.47.9")
      packages:
        - package: github.com/cosmos/cosmos-sdk
    - module: github.com/cosmos/cosmos-sdk
      versions:
        - introduced: TODO (earliest fixed "0.50.5", vuln range ">= 0.50.0, <= 0.50.4")
      packages:
        - package: github.com/cosmos/cosmos-sdk
summary: 'ASA-2024-005: Potential slashing evasion during re-delegation'
ghsas:
    - GHSA-86h5-xcpx-cfqc
references:
    - advisory: https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-86h5-xcpx-cfqc
    - fix: https://github.com/cosmos/cosmos-sdk/commit/7dbed2fc0c3ed7c285645e21cb1037d8810372ae
    - fix: https://github.com/cosmos/cosmos-sdk/commit/d1b5b0c5ae2c51206cc1849e09e4d59986742cc3
    - advisory: https://github.com/advisories/GHSA-86h5-xcpx-cfqc

[gopherbot]

Change https://go.dev/cl/568296 mentions this issue: data/reports: add GO-2024-2584.yaml