CVE-2024-37154

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.

• CWE-285
• CWE-863

• https://github.com/evmos/evmos/security/advisories/GHSA-7hrh-v6wp-53vwVendor Advisory
• https://github.com/evmos/evmos/security/advisories/GHSA-7hrh-v6wp-53vwVendor Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37149GLPI is an open-source asset and IT management software pack…8.8
• CVE-2024-3715The Database for Contact Form 7, WPforms, Elementor forms pl…7.2
• CVE-2024-37150An issue in `.npmrc` support in Deno 1.44.0 was discovered w…6.5
• CVE-2024-37151Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-37152Argo CD is a declarative, GitOps continuous delivery tool fo…7.5
• CVE-2024-37153Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmo…7.5
• CVE-2024-37155OpenCTI is an open source platform allowing organizations to…8.2
• CVE-2024-37156The SuluFormBundle adds support for creating dynamic forms i…6.1
• CVE-2024-37157Discourse is an open-source discussion platform. Prior to ve…5.3
• CVE-2024-37158Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmo…8.1
• CVE-2024-37159Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmo…6.5
• CVE-2024-3716A flaw was found in foreman-installer when puppet-candlepin …6.2