CosmWasm records
3 published records for vendor CosmWasm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-190 Integer Overflow or Wraparound1
- CWE-284 Improper Access Control1
- CWE-674 Uncontrolled Recursion1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
30Monitor | CVE-2025-25500No exploit | An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capabcosmwasm · cosmwasm · CWE-284 | High7.5 | 0.8%Mar 18, 2025 |
30Monitor | CVE-2024-58264No exploit | The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.cosmwasm · serde-json-wasm · CWE-674 | High7.5 | 0.5%Jul 27, 2025 |
21Monitor | CVE-2024-58263No exploit | The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.cosmwasm · cosmwasm-std · CWE-190 | Medium5.3 | 0.4%Jul 27, 2025 |
- CVE-2025-2550030Monitor
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capab
HighCVSS 7.5No exploitEPSS 0%cosmwasm · cosmwasmMar 18, 2025
- CVE-2024-5826430Monitor
The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.
HighCVSS 7.5No exploitEPSS 0%cosmwasm · serde-json-wasmJul 27, 2025
- CVE-2024-5826321Monitor
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
MediumCVSS 5.3No exploitEPSS 0%cosmwasm · cosmwasm-stdJul 27, 2025