---
id: CVE-2021-45700
aliases:
  - RUSTSEC-2021-0109
  - GHSA-45p7-c959-rgcm
  - GHSA-cw98-cx2m-9qqg
title: Process crashes when the cell used as DepGroup is not alive
summary: Process crashes when the cell used as DepGroup is not alive
severity: none
vendor: ckb
product: ckb
ecosystem: rust
affected:
  - 'ckb >= 0.0.0-0, < 0.40.0'
patched:
  - ckb 0.40.0
published: '2021-07-25'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T18:00:05.114135885Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/RUSTSEC-2021-0109'
references:
  - url: 'https://crates.io/crates/ckb'
  - url: 'https://rustsec.org/advisories/RUSTSEC-2021-0109.html'
tags:
  - osv
  - rust
epss: 0.01124
epssPercentile: 0.66095
ingestedAt: '2026-10-13T11:45:30.153Z'
---

## Overview

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.

## Affected packages

- `ckb >= 0.0.0-0, < 0.40.0`

## Remediation

Upgrade to a patched release:

- `ckb 0.40.0`