{"action":"Upgrade ckb to 0.43.1 or later.","affected":[{"fixed":"0.43.1","introduced":"0"}],"component":"ckb","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.43.1"],"ghsa_id":"GHSA-j35p-q24r-5367","id":"tcs_01M5KF0TA8SJZBH5Z846QQTP2P","modified_at":"2022-04-22T20:23:04Z","published_at":"2022-04-22T20:23:04Z","references":["https://osv.dev/vulnerability/GHSA-j35p-q24r-5367","https://github.com/nervosnetwork/ckb/security/advisories/GHSA-j35p-q24r-5367","https://github.com/nervosnetwork/ckb","https://github.com/nervosnetwork/ckb/blob/v0.42.0/util/types/src/core/cell.rs#L600-L617"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j35p-q24r-5367","url":"https://osv.dev/vulnerability/GHSA-j35p-q24r-5367"}],"summary":"Dep Group Remote Memory Exhaustion (Denial of Service) in ckb"}