{"id":"CVE-2021-45700","aliases":["RUSTSEC-2021-0109","GHSA-45p7-c959-rgcm","GHSA-cw98-cx2m-9qqg"],"title":"Process crashes when the cell used as DepGroup is not alive","summary":"Process crashes when the cell used as DepGroup is not alive","severity":"none","vendor":"ckb","product":"ckb","ecosystem":"rust","affected":["ckb >= 0.0.0-0, < 0.40.0"],"patched":["ckb 0.40.0"],"published":"2021-07-25","updated":"2026-10-12","sourceUpdated":"2026-10-12T18:00:05.114135885Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2021-0109","references":[{"url":"https://crates.io/crates/ckb"},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0109.html"}],"tags":["osv","rust"],"epss":0.01124,"epssPercentile":0.66095,"ingestedAt":"2026-10-13T11:45:30.153Z","slug":"CVE-2021-45700","body":"## Overview\n\nIt's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.\n\n## Affected packages\n\n- `ckb >= 0.0.0-0, < 0.40.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `ckb 0.40.0`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}