Is ckb safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-29c2-65rj-h343 · 2024-02-03Nervos CKB Permit load cell data from memory
• VulnerabilityGHSA-29c2-65rj-h343 · 2024-02-03Nervos CKB Permit load cell data from memory
• VulnerabilityGHSA-29c2-65rj-h343 · 2024-02-03Nervos CKB Permit load cell data from memory
• VulnerabilityGHSA-29c2-65rj-h343 · 2024-02-03Nervos CKB Permit load cell data from memory
• VulnerabilityGHSA-29c2-65rj-h343 · 2024-02-03Nervos CKB Permit load cell data from memory
• VulnerabilityGHSA-h4c3-5275-vrmg · 2024-02-03Nervos CKB Pool does not remove the conflicting transactions from the statistics
• VulnerabilityGHSA-q73f-w3h7-7wcc · 2024-02-03Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
• VulnerabilityGHSA-3gjh-29fv-8hr6 · 2024-02-03Nervos CKB Snappy decompress length can be very large and causes out of memory error
• VulnerabilityGHSA-wjxc-pjx9-4wvm · 2024-02-03Nervos CKB Panic on malformed input
• VulnerabilityGHSA-hjqq-29pw-96wj · 2024-02-02Nervos CKB node panics when processing a block which parent timestamp is too new
• VulnerabilityGHSA-hjqq-29pw-96wj · 2024-02-02Nervos CKB node panics when processing a block which parent timestamp is too new
• VulnerabilityGHSA-r9rv-9mh8-pxf4 · 2024-02-02Nervos CKB BlockTimeTooNew should not be considered as invalid block
• VulnerabilityGHSA-pr39-8257-fxc2 · 2024-02-02Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP
• VulnerabilityGHSA-84x2-2qv6-qg56 · 2024-02-02Nervos CKB P2P DoS Attacks
• VulnerabilityGHSA-q669-2vfg-cxcg · 2024-02-02Nervos CKB Unaligned Pointer Dereference
• VulnerabilityGHSA-p2gm-ffr3-w2xw · 2023-02-08Nervos CKB vulnerable to low-resource flood DDoS attacks through network message
• VulnerabilityGHSA-fjj4-2q73-jvgc · 2023-02-08Nervos CKB calculation of program load cycles may be missed when executing in resume mode
• VulnerabilityGHSA-mcmr-49x3-4jqm · 2022-11-02ckb type_id script resume may randomly fail
• VulnerabilityGHSA-7fw6-6mfj-g3q2 · 2022-11-02ckb: Transaction header_deps validation issue (network forking)
• VulnerabilityGHSA-9mfc-chwf-7whf · 2022-11-02ckb: Large dep group requires a lot of resources to process but the cost to commit the transaction is very low.
• VulnerabilityGHSA-j35p-q24r-5367 · 2022-04-22Dep Group Remote Memory Exhaustion (Denial of Service) in ckb
• VulnerabilityRUSTSEC-2021-0107 · 2021-07-25Miner fails to get block template when a cell used as a cell dep has been destroyed.
• VulnerabilityRUSTSEC-2021-0108 · 2021-07-25Remote memory exhaustion in ckb
• VulnerabilityRUSTSEC-2021-0109 · 2021-07-25Process crashes when the cell used as DepGroup is not alive

Check your version

Run cargo tree -i ckb to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.