{"action":"Upgrade ckb to 0.35.2 or later.","affected":[{"fixed":"0.39.0","introduced":"0.39.0-rc1"},{"fixed":"0.35.2","introduced":"0.35.0-rc1"},{"fixed":"0.36.1","introduced":"0.36.0-rc1"},{"fixed":"0.37.1","introduced":"0.37.0-rc1"},{"fixed":"0.38.2","introduced":"0.38.0-rc1"}],"component":"ckb","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.39.0","0.35.2","0.36.1","0.37.1","0.38.2"],"ghsa_id":"GHSA-29c2-65rj-h343","id":"tcs_01M5KER3ASRQHYY5JJ90TVRHK3","modified_at":"2024-02-03T00:29:06Z","published_at":"2024-02-03T00:29:06Z","references":["https://osv.dev/vulnerability/GHSA-29c2-65rj-h343","https://github.com/nervosnetwork/ckb/security/advisories/GHSA-29c2-65rj-h343","https://github.com/nervosnetwork/ckb/commit/277061867eb7d2766fa6737c8bf00684fc2462a6","https://github.com/nervosnetwork/ckb/commit/37d60d581c6713d3aca1a57018eaea45447ae0b2","https://github.com/nervosnetwork/ckb/commit/8f115b387f8f60f938bce4591f26cd78430b8771","https://github.com/nervosnetwork/ckb/commit/91efb7b6b4329d70d60eee91d5239a2de9b0d99f","https://github.com/nervosnetwork/ckb/commit/97647408ee9dbf525f6c678796e770887c9f8738"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-29c2-65rj-h343","url":"https://osv.dev/vulnerability/GHSA-29c2-65rj-h343"}],"summary":"Nervos CKB Permit load cell data from memory"}