Every CVESearch/Get API key

GHSA-q73f-w3h7-7wcc

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

No scoreFix available

Impact

Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs' load data is none.

What each source reports

GitHub AdvisoriesNo score

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Impact

Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs' load data is none.

Record
GHSA-q73f-w3h7-7wcc
Updated
2026-11-02
OSVNo score

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Impact

Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic

Workarounds

Enforce tx-pool ResolvedTrascation inputs' load data is none.

Record
GHSA-q73f-w3h7-7wcc
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ckb
crates.io
through 0.34.1
0.34.2
ckb
crates.io
before 0.34.2
0.34.2

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-q73f-w3h7-7wcc is a vulnerability with no CVSS score yet in ckb, published February 3, 2024. No source lists public exploit code. Fixed in ckb 0.34.2.

References

MoveEnter Open