Description
An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | ckb | < 0.40.0 | 0.40.0 | GHSA-2969-8hh9-57jc |
| crates.io | ckb | >= 0.0.0-0, < 0.40.0 | 0.40.0 | RUSTSEC-2021-0108 |