The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain.