x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-95rx-m9m5-m94v

[GoVulnBot]

In GitHub Security Advisory GHSA-95rx-m9m5-m94v, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/cosmos/cosmos-sdk	0.50.5	>= 0.50.0, <= 0.50.4

Cross references:

• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: CVE-2021-41135 #255 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-23px-mw2p-46qm #2047 NOT_IMPORTABLE
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-qfc5-6r3j-jj22 #1821
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk #1861
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-w5w5-2882-47pc #1881
• Module github.com/cosmos/cosmos-sdk appears in issue x/vulndb: potential Go vuln in github.com/cosmos/cosmos-sdk: GHSA-86h5-xcpx-cfqc #2584

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/cosmos/cosmos-sdk
      versions:
        - introduced: TODO (earliest fixed "0.50.5", vuln range ">= 0.50.0, <= 0.50.4")
      packages:
        - package: github.com/cosmos/cosmos-sdk
summary: |-
    ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow
    incorrect voting power assumptions
ghsas:
    - GHSA-95rx-m9m5-m94v
references:
    - advisory: https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-95rx-m9m5-m94v
    - fix: https://github.com/cosmos/cosmos-sdk/commit/4467110df40797ebe916c23ebfd45c9ee7583897
    - web: https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.5
    - advisory: https://github.com/advisories/GHSA-95rx-m9m5-m94v

[gopherbot]

Change https://go.dev/cl/582358 mentions this issue: data/reports: batch add 11 unreviewed reports

[gopherbot]

Change https://go.dev/cl/584757 mentions this issue: data/reports: add GO-2024-2638.yaml