PatchTheCVE: nervoshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-45700: An issue was discovered in the ckb crate before 0.40.0 for Rusthttps://patchthecve.com/cve/CVE-2021-45700.htmlhttps://patchthecve.com/cve/CVE-2021-45700.htmlWed, 17 Jun 2026 04:13:58 +0000HIGH 7.5: An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup.CVE-2021-45699: An issue was discovered in the ckb crate before 0.40.0 for Rusthttps://patchthecve.com/cve/CVE-2021-45699.htmlhttps://patchthecve.com/cve/CVE-2021-45699.htmlWed, 17 Jun 2026 04:13:58 +0000HIGH 7.5: An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap.CVE-2021-45698: An issue was discovered in the ckb crate before 0.40.0 for Rusthttps://patchthecve.com/cve/CVE-2021-45698.htmlhttps://patchthecve.com/cve/CVE-2021-45698.htmlWed, 17 Jun 2026 04:13:58 +0000CRITICAL 9.8: An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction.CVE-2021-45697: An issue was discovered in the molecule crate before 0.7.2 for Rusthttps://patchthecve.com/cve/CVE-2021-45697.htmlhttps://patchthecve.com/cve/CVE-2021-45697.htmlWed, 17 Jun 2026 04:13:58 +0000CRITICAL 9.8: An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result.