Every CVESearch/Get API key

GHSA-wjxc-pjx9-4wvm

Nervos CKB Panic on malformed input

No scoreFix available

Impact

CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages

References

https://github.com/BurntSushi/rust-snappy/issues/29

What each source reports

GitHub AdvisoriesNo score

Nervos CKB Panic on malformed input

Impact

CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages

References

https://github.com/BurntSushi/rust-snappy/issues/29

Record
GHSA-wjxc-pjx9-4wvm
Updated
2026-11-02
OSVNo score

Nervos CKB Panic on malformed input

Impact

CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages

References

https://github.com/BurntSushi/rust-snappy/issues/29

Record
GHSA-wjxc-pjx9-4wvm
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ckb
crates.io
through 0.34.1
0.34.2
ckb
crates.io
before 0.34.2
0.34.2

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-wjxc-pjx9-4wvm is a vulnerability with no CVSS score yet in ckb, published February 3, 2024. No source lists public exploit code. Fixed in ckb 0.34.2.

References

MoveEnter Open