# IBC Security Advisory Huckleberry

**URL:** <https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731>\
**Category:** Security\
**Created:** [May 24, 2023, 1:18pm UTC](https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731 "2023-05-24T13:18:20Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![CarlosRodriguez](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/carlosrodriguez/32/2454_2.png) [@CarlosRodriguez](https://forum.cosmos.network/u/CarlosRodriguez)\
**Post date:** [May 24, 2023, 1:18pm UTC](https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731/1 "2023-05-24T13:18:20Z")

</div>

Recently, the ibc-go team received a report via Hacker One of a potential security vulnerability impacting IBC connected full nodes. This issue is low-severity in general, and it has a low impact and likelihood of exploitation. Depending on how a full node is architected, this issue could potentially yield a high or critical severity vulnerability.

ALL versions of ibc-go are affected. A patch to remediate this issue will be released on **May 25th at 15:00 CET** in the following versions:

v7.0.1  
v6.1.1  
v5.3.1  
v5.2.1  
v4.4.1  
v4.3.1  
v4.2.2  
v4.1.3

Note that the patch is NOT state-machine breaking. The patch can be deployed individually by validators and full nodes without a chain-halt upgrade and should be applied as soon as possible. Though many potentially impacted parties have mitigations in place to prevent the issue from introducing vulnerability into their architectures, we highly recommend that full node operators, oracle networks, and bridges prepare to patch their implementations as quickly as possible once the release is available to fully remediate this issue.

This notice has been posted in accordance with the ibc-go’s [vulnerability disclosure policy](https://github.com/cosmos/ibc-go/blob/main/SECURITY.md). If you find a vulnerability, please disclose it responsibly via our bug bounty program on [HackerOne](https://hackerone.com/cosmos).

---

_[View the full topic](https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731)._