github.com
https://github.com/nervosnetwork/ckb/security/advisories/GHSA-45p7-c959-rgcm GHSA-45P7-C959-RGCM
Process crashes when the cell used as DepGroup is not alive
Description
### Impact It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.
Description source: GitHub Advisory
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
| GitHub Advisory | Before 0.40.0 · Fixed in 0.40.0 | affected |
References
2rustsec.org
https://rustsec.org/advisories/RUSTSEC-2021-0109.html