Cosmos-SDK Security Advisory Jackfruit

Conversation Security
2

The patches that resolve the issues comprising Security Advisory Jackfruit have been released in v0.44.2 of the Cosmos-SDK. All releases are now available to the public.

A full timeline of the vulnerability disclosure and coordination activities that comprise this release should be available by Tuesday, October 19.

You can find source code and binaries available on the respective release page:

Again, this vulnerability does not impact the current Cosmos Hub.

2 Likes