Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2022-0333

Date: August 19, 2025

A vulnerability in cheqd-node before 0.6.9 affects IBC transfers due to a security vulnerability dubbed "Dragonberry" upstream in Cosmos SDK, which allows malicious attackers to compromise chain-to-chain IBC transfers.

Language: Go

Severity Score

Related Resources (6)

https://github.com/cosmos/cosmos-sdk/releases/tag/v0.45.9
https://github.com/cheqd/cheqd-node/commit/7275bc3c615ce2f083376e9887b6e1e1fb227a7d
https://github.com/cheqd/cheqd-node
https://forum.cosmos.network/t/ibc-security-advisory-dragonberry/7702/1
https://github.com/cheqd/cheqd-node/security/advisories/GHSA-j92c-mmf7-j5x5
https://www.mend.io/vulnerability-database/WS-2022-0333

Severity Score

Weakness Type (CWE)

Improper Following of a Certificate's Chain of Trust

CWE-296

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us