GHSA-h4c3-5275-vrmg: Nervos CKB Pool does not remove the conflicting transactions from the statistics

February 3, 2024

There’s a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions.

References

github.com/advisories/GHSA-h4c3-5275-vrmg
github.com/nervosnetwork/ckb/security/advisories/GHSA-h4c3-5275-vrmg

Code Behaviors & Features

Detect and mitigate GHSA-h4c3-5275-vrmg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →