Issues

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  nervosnetwork/ckb#5350 · Filter by author nervos-bot opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  nervosnetwork/ckb#5349 · Filter by author nervos-bot opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  nervosnetwork/ckb#5348 · Filter by author nervos-bot opened on Oct 15, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  nervosnetwork/ckb#5347 · Filter by author nervos-bot opened on Oct 15, 2026

• Upstream sync needs manual rebase/merge

  nervosnetwork/ckb#5345 · Filter by author nervos-bot opened on Oct 10, 2026

• Release v0.211 RC

  nervosnetwork/ckb#5343 · Filter by author eval-exec opened on Oct 10, 2026

• Disabling Feeler can leave common protocols unopened when older peers connect after Alert removal

  t:bug
  nervosnetwork/ckb#5341 · Filter by author sunchengzhu opened on Oct 8, 2026
  1

• RPC: get_live_cell returns tx-pool cell data with with_data=false

  nervosnetwork/ckb#5335 · Filter by author gpBlockchain opened on Sep 23, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  nervosnetwork/ckb#5328 · Filter by author nervos-bot opened on Sep 15, 2026

• One allocator across Linux, macOS and Windows builds

  nervosnetwork/ckb#5326 · Filter by author Ttimmahlax opened on Sep 10, 2026
  

• QUIC listen address is not discovered for third-party outbound connections

  nervosnetwork/ckb#5310 · Filter by author Xcodes-chain opened on Aug 21, 2026
  1

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  nervosnetwork/ckb#5307 · Filter by author nervos-bot opened on Aug 19, 2026

• RUSTSEC-2026-0204: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid

  nervosnetwork/ckb#5273 · Filter by author nervos-bot opened on Jul 7, 2026

• RUSTSEC-2026-0119: CPU exhaustion during message encoding due to O(n²) name compression

  nervosnetwork/ckb#5199 · Filter by author nervos-bot opened on May 2, 2026
  1

  

• RocksDB L5+L6 compaction may require more than ~192 GiB free disk space due to high read/write amplification

  t:bug
  nervosnetwork/ckb#5164 · Filter by author eval-exec opened on Apr 10, 2026
  

• Backport #5142 docs: update platform-support.md to reflect latest CI and build settings

  nervosnetwork/ckb#5160 · Filter by author nervos-bot-user opened on Apr 2, 2026

• Backport #5023 fix: overhaul proposal selection and prioritization logic

  nervosnetwork/ckb#5139 · Filter by author nervos-bot-user opened on Mar 12, 2026

• Optimization suggestion: add configurable log splitting for run.log

  nervosnetwork/ckb#5137 · Filter by author sunchengzhu opened on Mar 11, 2026
  1

  

• Stuck on launching devnet based on existing mainnet datadir on MacOS 26.2 (25C56)

  t:doc
  nervosnetwork/ckb#5117 · Filter by author Keith-CY opened on Feb 28, 2026
  2

  

• [Need Reconsider] Warm up StoreCache entries from in‑memory BlockView to avoid redundant RocksDB scans

  t:enhancement
  nervosnetwork/ckb#5090 · Filter by author eval-exec opened on Jan 14, 2026

• Design Draft: Refactor RocksDB Schema for Reduced Read/Write Amplification

  design
  nervosnetwork/ckb#5087 · Filter by author eval-exec opened on Jan 13, 2026

• RUSTSEC-2023-0071: Marvin Attack: potential key recovery through timing sidechannels

  nervosnetwork/ckb#5068 · Filter by author nervos-bot opened on Dec 23, 2025
  

• RUSTSEC-2024-0437: Crash due to uncontrolled recursion in protobuf crate

  nervosnetwork/ckb#5067 · Filter by author nervos-bot opened on Dec 23, 2025
  

• RUSTSEC-2022-0093: Double Public Key Signing Function Oracle Attack on ed25519-dalek

  nervosnetwork/ckb#5066 · Filter by author nervos-bot opened on Dec 23, 2025
  

• RUSTSEC-2024-0344: Timing variability in curve25519-dalek's Scalar29::sub/Scalar52::sub

  nervosnetwork/ckb#5065 · Filter by author nervos-bot opened on Dec 23, 2025