```toml
[advisory]
id = "RUSTSEC-2021-0109"
package = "ckb"
date = "2021-07-25"
url = "https://github.com/nervosnetwork/ckb/security/advisories/GHSA-45p7-c959-rgcm"
aliases = ["GHSA-45p7-c959-rgcm"]
[versions]
patched = [">= 0.40.0"]
```

# Process crashes when the cell used as DepGroup is not alive 

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.