Description
An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | ckb | < 0.40.0 | 0.40.0 | GHSA-45p7-c959-rgcm |
| crates.io | ckb | >= 0.0.0-0, < 0.40.0 | 0.40.0 | RUSTSEC-2021-0109 |