https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-58264.htmlhttps://patchthecve.com/cve/CVE-2024-58264.htmlWed, 17 Jun 2026 08:14:44 +0000LOW 3.2: The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.https://patchthecve.com/cve/CVE-2024-58263.htmlhttps://patchthecve.com/cve/CVE-2024-58263.htmlWed, 17 Jun 2026 08:14:44 +0000LOW 3.7: The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.https://patchthecve.com/cve/CVE-2025-25500.htmlhttps://patchthecve.com/cve/CVE-2025-25500.htmlWed, 17 Jun 2026 09:00:50 +0000HIGH 7.5: An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain.