{"id":"GHSA-p2gm-ffr3-w2xw","aliases":[],"status":"published","title":"Nervos CKB vulnerable to low-resource flood DDoS attacks through network message","description":"### Workarounds\n* forbid request genesis through network request\n* forbid requesting duplicate data  through network request","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-02-08T18:17:06Z","modified":"2023-02-08T18:17:09Z","fixes":[{"ecosystem":"crates.io","package":"ckb","fixed_in":["0.101.4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.101.4"}]}]},{"source":"osv","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.101.4"}]}]}],"references":[{"url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-p2gm-ffr3-w2xw","tags":["web"]},{"url":"https://github.com/advisories/GHSA-p2gm-ffr3-w2xw"},{"url":"https://github.com/nervosnetwork/ckb","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-p2gm-ffr3-w2xw","title":"Nervos CKB vulnerable to low-resource flood DDoS attacks through network message","description":"### Workarounds\n* forbid request genesis through network request\n* forbid requesting duplicate data  through network request\n\n","status":"published","published":"2023-02-08T18:17:06Z","modified":"2023-02-08T18:17:09Z","updated_at":"2026-11-02T14:36:44.81167Z"}],"osv":[{"id":"GHSA-p2gm-ffr3-w2xw","title":"Nervos CKB vulnerable to low-resource flood DDoS attacks through network message","description":"### Workarounds\n* forbid request genesis through network request\n* forbid requesting duplicate data  through network request\n\n","status":"published","published":"2023-02-08T18:17:06Z","modified":"2023-02-08T18:17:06Z","updated_at":"2026-11-02T15:46:52.534897Z"}]}}