CVE-2021-45698

CRITICAL 9.8CVE-2021-45698 · Published 27/12/2021 · updated 17/06/2026

In short

CVE-2021-45698 is a CRITICAL (CVSS 9.8) vulnerability affecting ckb (nervos).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.
Fix: update to 0.40.0 or later.

Package	Affected versions	Patched versions
ckb nervos	`< 0.40.0`	`0.40.0`

Description

An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction.

References

raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0107.md · Third Party Advisory
rustsec.org/advisories/RUSTSEC-2021-0107.html · Third Party Advisory

More vulnerabilities in ckb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free