Hello fellow cosmwasm devs!
I am here to inform you that tomorrow, April 24th at 10 UTC there will be a `cosmwasm-std` release patching a medium security vulnerability involving arithmetic operations. There are no details about it but if your contract does math, you should migrate your contracts as soon as possible.
The patch will be included in cosmwasm-std 1.4.4, 1.5.4 and 2.0.2.
To apply it, the dependency must be updated and the contract upgraded on chain. Consequently, a chain upgrade is not necessary.
For more information check the CosmWasm X account, and follow me to get real time updates on this issue and more!
Cheers