Security: ZcashFoundation/zebra
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale BufferGHSA-gq4h-3grw-2rhv published
May 2, 2026 by mpguerraCritical -
Allocation Amplification in Inbound Network DeserializersGHSA-438q-jx8f-cccv published
May 2, 2026 by mpguerraModerate -
Zebra Transparent SIGHASH_SINGLE Corresponding-Output Handling Diverges From zcashdGHSA-cwfq-rfcr-8hmp published
May 2, 2026 by mpguerraCritical -
Block Validator Undercounts Coinbase and P2SH SigopsGHSA-jv4h-j224-23cc published
May 2, 2026 by mpguerraCritical -
Denial of Service via Interrupted JSON-RPC Requests from Authenticated ClientsGHSA-29x4-r6jv-ff4w published
Apr 17, 2026 by mpguerraModerate -
rk Identity Point Panic in Transaction VerificationGHSA-452v-w3gx-72wg published
Apr 17, 2026 by mpguerraCritical -
Consensus Divergence in Transparent Sighash Hash-Type HandlingGHSA-8m29-fpq5-89jj published
Apr 17, 2026 by mpguerraCritical -
addr/addrv2 Deserialization Resource ExhaustionGHSA-xr93-pcq3-pxf8 published
Apr 17, 2026 by mpguerraModerate -
Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip BlocksGHSA-xvj8-ph7x-65gf published
Apr 17, 2026 by mpguerraHigh -
CVE-2026-34377: Consensus Failure via Crafted V5 Authorization DataGHSA-3vmh-33xr-9cqh published
Mar 27, 2026 by alchemydcHigh