{"id":"GO-2025-3997","revision":"b5215819e0e441e98b8f072e2eec0e85","records":[{"revision":"b5215819e0e441e98b8f072e2eec0e85","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3997","aliases":["CVE-2025-61595","GHSA-qwvm-wqq8-8j69"],"title":"github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks in github.com/MANTRA-Chain/mantrachain","description":"github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks in github.com/MANTRA-Chain/mantrachain","state":0,"publishedAt":"2025-10-23T16:25:09+00:00","modifiedAt":"2026-03-03T04:56:57.771219+00:00","affected":[{"ecosystem":"Go","name":"github.com/MANTRA-Chain/mantrachain","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/MANTRA-Chain/mantrachain/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/MANTRA-Chain/mantrachain/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/MANTRA-Chain/mantrachain/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"4.0.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/MANTRA-Chain/mantrachain/security/advisories/GHSA-qwvm-wqq8-8j69","https://nvd.nist.gov/vuln/detail/CVE-2025-61595","https://github.com/MANTRA-Chain/mantrachain/commit/30d36c46e9823b56b8f0dcbb66e980ca5df284e4","https://github.com/MANTRA-Chain/mantrachain/issues/432"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3997","license":"OSV · upstream source license applies","key":"osv:GO-2025-3997","identifiers":["GO-2025-3997","CVE-2025-61595","GHSA-qwvm-wqq8-8j69"]},"retained":false,"historicalAffected":[]}],"coverage":[]}