VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/cosmos/ethermint: vulnerability history, versions and safety

github.com/cosmos/ethermint is a package in the Go ecosystem. Vulert records 4 vulnerabilities for it across 120 releases, from Feb 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded H2 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/cosmos/ethermint vulnerabilities

Vulert verdict on github.com/cosmos/ethermint v0.4.1 i

Updated on 23 Oct 2026

Action needed: v0.4.1 has 4 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 59/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.4.1 — affected i
  • Vulnerabilities on record 4 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Stars 411 i
  • OpenSSF scorecard 3/10 i
  • Last release 67 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/cosmos/ethermint, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.4.2-0.20211130100248-3ea865b4abab 30 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211126101810-6e6f65c0da23 26 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211126101532-e5b01563ce0c 26 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211123100309-40e718bc073b 23 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211116101810-f45f8f696ffe 16 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211115100333-0aa1b31ac6e0 15 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20211105103025-14760e6cbd74 05 Nov 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210922083513-de6a03e7b85d 22 Sep 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210902072305-7a8384544994 02 Sep 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210518175006-3596d535e1e3 18 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210514233547-633202f5ac13 14 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210514211923-e68609fd8c5e 14 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210514211822-3c07cf9c27ef 14 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210511183419-53f7a4982998 11 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210511182728-3cbf342f46d5 11 May 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210420202715-ae89e0804380 20 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210420191912-6437be01a2f8 20 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210419182403-4de267daa7c8 19 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210419143247-3946de36b860 19 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210416155153-c002b8562861 16 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210415193008-57b7f2644ea2 15 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210415170227-a00ab1d0e050 15 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210415164318-da1009217b1f 15 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210414174505-b345c3e0c6dc 14 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210409144405-59c62c22bee2 09 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210408223802-2437a09c5338 08 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210408221623-20f9a729089e 08 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210408191051-874462e4674c 08 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210408154531-c65002fd5218 08 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210407184452-08f0799552df 07 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210407183635-c42889152007 07 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210407183247-5b3e95fa053c 07 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405205056-b67438c302ee 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405173719-69023c6680a8 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405160326-9f865da4024e 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405160059-33756dbc50f1 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405155521-ba8a307fc517 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210405151949-985831b2e33d 05 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210401210108-3da701a4e3ae 01 Apr 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210331211849-8459589cc6d4 31 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210329210649-9b6d97a8151e 29 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210325141541-604ac4a69859 25 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210319194942-8b772e76f68a 19 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210319172344-9dc1f1cfddf1 19 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210319145919-5b208fed78ff 19 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210319030429-75fb3ccb8935 19 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210318215617-9acfd582efe9 18 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210316203732-2df3abd6a2ae 16 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210315225330-f2328a02dc07 15 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210315202935-44a567530a6b 15 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210315171752-2294a19e2361 15 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210315165035-661998a51103 15 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210315162815-7b2d60614e1b 15 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312204437-a190e50a5419 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312204247-fefc4c674ea1 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312204101-8c307565b221 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312203007-8f343c35254e 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312202535-8348e32e8191 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312201237-ac1b3bb94219 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312195838-6e130b7e6422 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312194417-690991ec0659 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312193333-a061da6cb55c 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210312175430-f0a12f09117c 12 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210311223127-a1ec1f46ea00 11 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210310202013-4fa2d195e329 10 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210308175835-0afe6d7f068e 08 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210302205746-382a7a79a388 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210302194112-e31fcc701207 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210302191602-52587bf39ffd 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210302022311-d45dd956c86a 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210302011811-ce41c6a7a1ec 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.2-0.20210302010621-1782ebf5347e 02 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.4.1 01 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210301191021-6cb5d54c8603 01 Mar 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210226233710-4530491a12fa 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210226215233-d1e22e1544d5 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.2 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210226155022-99112e1cbd81 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210226015851-c3170ce6ceb6 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210226014100-a82a2cebaf48 26 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210225204248-4a5e10daeeae 25 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210224211948-1b729019fb45 24 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210223232117-e72f0b9e48ec 23 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210223192729-ee7bd3748b9f 23 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210219194345-d9b546ada657 19 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210219191803-8a6cd7289168 19 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210218200613-507e5c147e9a 18 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210218200439-6242a88ac44e 18 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210216210429-fae8147352e6 16 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210212214445-e30687d73df3 12 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210211205402-67597c0b43d8 11 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210211203435-6f218bcee6d8 11 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210211202744-1b4505f15b5f 11 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210210222102-79d916aa423a 10 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210210215354-675d264018ea 10 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210210215214-5474ef0cccd2 10 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210209184143-cdc64a2e3885 09 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210209183707-da5368ceb7af 09 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210208235418-177574aafa34 08 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210208220047-bf2f2aab6ea0 08 Feb 2021 H2 U2 Apache-2.0 Yes Details →
v0.3.1-0.20210208191044-7995ccd6096e 08 Feb 2021 H2 U2 — Yes Details →
v0.3.1-0.20210204213637-4a1c3e02c944 04 Feb 2021 H2 U2 — Yes Details →
v0.3.1-0.20210202150615-be664839e91e 02 Feb 2021 H2 U2 — Yes Details →
v0.3.1-0.20210201022022-6d11e233265b 01 Feb 2021 H2 U2 — Yes Details →
v0.3.1-0.20210130215842-e16081ffe104 30 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210130144641-5884ba033208 30 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210130142933-6eb238d60907 30 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210130141348-761ab446d708 30 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210130140425-44331b30bd6b 30 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210129175003-80b7e45be6ad 29 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210129051637-e1349e46a39f 29 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210128163038-c95ad0432bd9 28 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210127203459-16f1dabdbc88 27 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210127002117-a0fd185499b0 27 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210126203115-0bb59745a45b 26 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210125143924-b0d6d8725c69 25 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210125143616-f0bf151176da 25 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210125140928-bfa9a733e005 25 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210121221729-d66381cb64a7 21 Jan 2021 H2 U2 — Yes Details →
v0.3.1-0.20210121221400-1bdebec79989 21 Jan 2021 H2 U2 — Yes Details →

The newest 120 of 990 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 2
  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/cosmos/ethermint

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2021-25834: Authentication bypass by capture-replay in github.com/cosmos/ethermint 7.5 high 0.4.1 15 Feb 2022
CVE-2021-25835: Authentication bypass by capture-replay in github.com/cosmos/ethermint 7.5 high 0.4.1 15 Feb 2022
CVE-2021-25834: Authentication bypass by capture-replay in github.com/cosmos/ethermint N/A unrated 0.4.1 21 Aug 2024
CVE-2021-25835: Authentication bypass by capture-replay in github.com/cosmos/ethermint N/A unrated 0.4.1 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/cosmos/ethermint

Is github.com/cosmos/ethermint safe to use?

Vulert records 4 vulnerabilities for github.com/cosmos/ethermint in Go: 0 critical, 2 high, 0 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/cosmos/ethermint's Vulert package health score?

Vulert scores github.com/cosmos/ethermint 59/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/cosmos/ethermint affected?

Yes. v0.4.1, the version you would install today, has 4 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/cosmos/ethermint should I use?

v0.4.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/cosmos/ethermint have?

4 vulnerabilities are recorded for github.com/cosmos/ethermint in the Go ecosystem: 0 critical, 2 high, 0 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/cosmos/ethermint vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/cosmos/ethermint in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/cosmos/ethermint are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/cosmos/ethermint for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/cosmos/ethermint version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.