{"id":"GHSA-q73f-w3h7-7wcc","aliases":[],"url":"https://o3.security/vulnerability/GHSA-q73f-w3h7-7wcc","summary":"Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result","details":"### Impact\nTx-pool verify transaction which inputs' script contains `load_cell_data_hash` is nondeterministic\n\n\n### Workarounds\nEnforce tx-pool ResolvedTrascation inputs' load data is none.","published":"2024-02-03T00:18:13Z","modified":"2024-02-03T00:18:13Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"ckb","fixedVersion":"0.34.2"}],"fix":{"url":"https://github.com/nervosnetwork/ckb/commit/01eb5b2ecadf7e421b117d6c013e182978746e2f","label":"nervosnetwork/ckb@01eb5b2"},"references":[{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-q73f-w3h7-7wcc"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/01eb5b2ecadf7e421b117d6c013e182978746e2f"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/fe83220905599e72c97878295f4769e91348d738"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/ff88b48779358e038209f3ac1bc1061e6f4deb13"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-02-03T00:18:13Z"}}