Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-29c2-65rj-h343: Nervos CKB Permit load cell data from memory

Impact

The faulty nodes will reject transactions which calls load_cell_data syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation.

Patches

0.35.2, 0.36.1, 0.37.1, 0.38.2

ghsa
#git

Nervos CKB Permit load cell data from memory

Moderate severity GitHub Reviewed Published Apr 25, 2021 in nervosnetwork/ckb • Updated Feb 3, 2024

ghsa: Latest News

GHSA-m43g-m425-p68x: junit-platform-reporting can leak Git credentials through its OpenTestReportGeneratingListener