{"id":13566578,"url":"https://github.com/CosmWasm/advisories","last_synced_at":"2025-04-04T00:31:03.318Z","repository":{"id":41972550,"uuid":"428787107","full_name":"CosmWasm/advisories","owner":"CosmWasm","description":"To publicly communicate advisories about serious bugs in CosmWasm, wasmvm, and wasmd","archived":false,"fork":false,"pushed_at":"2025-03-19T16:36:34.000Z","size":180,"stargazers_count":15,"open_issues_count":1,"forks_count":22,"subscribers_count":21,"default_branch":"main","last_synced_at":"2025-03-19T17:36:40.337Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CosmWasm.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-11-16T19:26:47.000Z","updated_at":"2025-03-05T12:21:09.000Z","dependencies_parsed_at":"2023-10-19T08:36:51.776Z","dependency_job_id":"5374ab19-246b-4087-9693-d2d1fd6860e5","html_url":"https://github.com/CosmWasm/advisories","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CosmWasm%2Fadvisories","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CosmWasm%2Fadvisories/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CosmWasm%2Fadvisories/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CosmWasm%2Fadvisories/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CosmWasm","download_url":"https://codeload.github.com/CosmWasm/advisories/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247103306,"owners_count":20884023,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T13:02:12.372Z","updated_at":"2025-04-04T00:31:03.298Z","avatar_url":"https://github.com/CosmWasm.png","language":"Shell","funding_links":[],"categories":["Misc"],"sub_categories":[],"readme":"# CosmWasm Advisories\n\nWe at [Confio](https://confio.gmbh/) love open source! We work in the best intent with a public review process but must accept that software can contains bugs and therefore our code, too.\n\nIn order to help with resolving any issues on production system, we have started the advisories project to link to authorized communication channels of [CosmWasm](https://cosmwasm.com/) blockchains.\nConfio will inform the linked chains about **critical issues** reported to us directly on **non public channels** before opening an issue on our related projects.\nNevertheless providing this information should not prevent us or anybody else from working on a fix nor block a patch roll out.\nThis also does not include bugs and issues reported to us publicly via github issues or official discord channels. Chains using our projects are encouraged to **watch the github repos and official channels** on [CosmWasm discord](https://discord.com/invite/cPjEnPd) in order to maintain their own software stack.\n\n## Supported projects and version\n\n- CosmWasm ([cosmwasm-\\*](https://github.com/CosmWasm/cosmwasm) and [wasmvm](https://github.com/CosmWasm/wasmvm))\n  - ~1.2.x ([until 2023-12-31](https://medium.com/cosmwasm/eol-for-cosmwasm-1-0-1-3-22df4b34b13c))~\n  - ~1.3.x ([until 2024-03-31](https://medium.com/cosmwasm/eol-for-cosmwasm-1-0-1-3-22df4b34b13c))~\n  - ~1.4.x ([until 2024-07-31](https://medium.com/cosmwasm/cosmwasm-1-5-becomes-long-term-support-lts-version-16632bf06f2a))~\n  - 1.5.x ([until 2025-04-30](https://medium.com/cosmwasm/cosmwasm-2-2-becomes-long-term-support-lts-version-7fdd6a507485))\n  - ~2.0.x ([until 2025-01-31](https://medium.com/cosmwasm/cosmwasm-2-2-becomes-long-term-support-lts-version-7fdd6a507485))~\n  - ~2.1.x ([until 2025-01-31](https://medium.com/cosmwasm/cosmwasm-2-2-becomes-long-term-support-lts-version-7fdd6a507485))~\n  - 2.2.x\n- [wasmd](https://github.com/CosmWasm/wasmd)\n  - 1.0.x\n\n## Criteria to get on the notification list\n\n- Run CosmWasm projects **on prodution** or public testnet\n- `SECURITY.md` in your main repo and main branch with contact details and infos on your disclosure process\n- Commitment to share issues and bugs with Confio and the CosmWasm community\n\nIf your project matches these criteria then please do a PR to add your chain to the list below.\n\n## Disclaimer\n\nWe likely will not have capacity to maintain this service for all versions and projects forever.\nSo we want to keep the right to:\n\n- modify this document\n- add/remove project and versions\n- change the criterias and revisit the listed members\n- not accept every application\n\n\u003c!--\n# legal stuff about:\n\nbrand(s)\nlogo(s)\n\n--\u003e\n\n## Notification list\n\nSee [NOTIFICATION_LIST.md](NOTIFICATION_LIST.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FCosmWasm%2Fadvisories","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FCosmWasm%2Fadvisories","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FCosmWasm%2Fadvisories/lists"}