VDB
Sign up
CRITICAL

GHSA-45p7-c959-rgcm

Process crashes when the cell used as DepGroup is not alive

Details

### Impact

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/ckb
Introduced in: 0Fixed in: 0.40.0

Upgrade ckb to 0.40.0 or newer (ecosystem crates.io).

References