Skip to content

Process crashes when the cell used as DepGroup is not alive

Critical
doitian published GHSA-45p7-c959-rgcm Jul 26, 2021

Package

No package listed

Affected versions

< 0.39.2

Patched versions

0.39.2

Description

Impact

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.

Severity

Critical

CVE ID

No known CVE

Weaknesses

No CWEs