# Cosmos-SDK Security Advisory Elderflower

**URL:** <https://forum.cosmos.network/t/cosmos-sdk-security-advisory-elderflower/8584>\
**Category:** Security\
**Created:** [December 9, 2022, 5:22pm UTC](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-elderflower/8584 "2022-12-09T17:22:48Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ebuchman](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/ebuchman/32/6645_2.png) [@ebuchman](https://forum.cosmos.network/u/ebuchman)\
**Post date:** [December 9, 2022, 5:22pm UTC](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-elderflower/8584/1 "2022-12-09T17:22:48Z")

</div>

A critical vulnerability was discovered in the Cosmos-SDK in October 2022 that affects versions v0.44.x, v0.45.x, and v0.46.x. A patch for this vulnerability was included as part of the official patches published for [Dragonberry](https://forum.cosmos.network/t/ibc-security-advisory-dragonberry/7702) in v0.44.5-patch, v0.45.9, and v0.46.3. If you have already applied an official public patch release for Dragonberry, then you are also patched for Elderflower and no action is required. If not, please reach out to [security@interchain.io](mailto:security@interchain.io) for support in applying the patches immediately.

A retrospective on both Dragonberry and Elderflower with details about the exploits will be published together on Thursday December 15, 2022.

If you find a vulnerability, please disclose it responsibly via our bug bounty program: [HackerOne](https://hackerone.com/cosmos)