Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

Partly patchedCritical · CVSS 9.3EPSS 0.27%

Published Sep 24, 2026 · updated Sep 24, 2026

What to do

  1. Upgrade to a fixed version: github.com/ixofoundation/ixo-blockchain/v8 8.0.0.
  2. Some affected packages have no fixed version yet: follow the advisory for mitigations and watch this page for the fix.
  3. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Gogithub.com/ixofoundation/ixo-blockchain/v8

Vulnerable versions
< 8.0.0
Fixed in
8.0.0

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v8

Gogithub.com/ixofoundation/ixo-blockchain/v7

Vulnerable versions
<= 7.0.0
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v7

Gogithub.com/ixofoundation/ixo-blockchain/v6

Vulnerable versions
<= 6.0.1
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v6

Gogithub.com/ixofoundation/ixo-blockchain/v5

Vulnerable versions
<= 5.0.0
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v5

Gogithub.com/ixofoundation/ixo-blockchain/v4

Vulnerable versions
<= 4.0.0
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v4

Gogithub.com/ixofoundation/ixo-blockchain/v3

Vulnerable versions
<= 3.0.0
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain/v3

Gogithub.com/ixofoundation/ixo-blockchain

Vulnerable versions
<= 1.6.0
Fixed in
no fix yet

Check your project: go list -m all | grep github.com/ixofoundation/ixo-blockchain

Sources

CWE-285 Improper Authorization · CWE-862 Missing Authorization

← All critical vulnerabilities