Is github.com/tharsis/evmos safe to use?

github.com/tharsis/evmos has 4 known vulnerabilities on the latest version (v1.1.3). DepScope rates its health at 35/100 (critical risk).

What is the latest version of github.com/tharsis/evmos?

The latest version of github.com/tharsis/evmos is v1.1.3, released 2022-07-13.

Does github.com/tharsis/evmos have known vulnerabilities?

Yes. github.com/tharsis/evmos has 4 known vulnerabilities. See depscope.dev/pkg/go/github.com/tharsis/evmos for details.

Is github.com/tharsis/evmos deprecated?

No, github.com/tharsis/evmos is actively maintained. Latest release: v1.1.3 (2022-07-13).

What are alternatives to github.com/tharsis/evmos?

DepScope has no curated alternatives for github.com/tharsis/evmos at this time.

What license does github.com/tharsis/evmos use?

github.com/tharsis/evmos is licensed under Apache-2.0.

github.com/tharsis/evmos

govv1.1.3

Evmos is the canonical EVM chain on Cosmos. Evmos is the flagship implementation of evmOS, a stack to build forward compatible EVMs

License Apache-2.0permissive16 versions109 maintainers0 deps1,700 weekly dl

tharsis/evmos

/ 100

Health

do not use

github.com/tharsis/evmos has critical vulnerabilities — do not use

Update to >= 17.0.0 to fix known vulnerabilities

Low health score (35/100)
1 high severity vulnerabilities
1 critical vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

10/25

security

9/15

maturity

10/15

community

Vulnerabilities

1 critical1 high2 low

Advisories (4)

Severity	ID	Summary	Fixed in
critical	CVE-2024-32644	Evmos transaction execution not accounting for all state transition after interaction with precompiles	17.0.0
high	CVE-2022-24738	Account compromise in Evmos	2.0.1
unknown	CVE-2022-24738	Account compromise in Evmos in github.com/tharsis/evmos	2.0.1
unknown	CVE-2024-32644	Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos	17.0.0

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/tharsis/evmos

Last updated · 2022-07-13T15:43:34Z