pkg:crates.io/zebrad

All known vulnerabilities

• CRITICAL9.3CVE-2026-54496Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
  from 0, < 5.0.0
• CRITICAL9.1CVE-2026-44497Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer
  from 0, < 4.4.0
• CRITICAL9.1CVE-2026-41583Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling
  from 0, < 4.3.1
• HIGH7.5Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
  from 0, < 4.5.0
• HIGH7.5Zebra's Block Validator Undercounts Coinbase and P2SH Sigops
  from 0, < 4.4.0
• HIGH7.5Zebra has rk Identity Point Panic in Transaction Verification
  from 0, < 4.3.1
• MEDIUM6.5zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip
  from 0, < 4.5.0
• MEDIUM6.5zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate
  from 0, < 4.5.0
• MEDIUM6.5Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients
  >= 2.2.0, < 4.3.1
• MEDIUM5.9Zebra: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection
  from 0, < 4.5.0
• MEDIUM5.3zebrad has unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention
  from 0, < 4.5.0
• MEDIUM5.3Zebra has sync restart poisoning from single unauthenticated peer via above-lookahead block
  from 0, < 4.5.0
• MEDIUM5.3zebrad has mempool transaction admission denial via single-peer inbound queue saturation
  from 0, < 4.5.0
• MEDIUM5.3Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers
  from 0, < 4.4.0
• —Zebra: Finalized address balance credit-first overflow on consensus-valid blocks
  from 0, < 4.5.0
• —zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
  from 0, < 4.5.0
• —Zebra has block suppression via NU5 same-header body poisoning of sent-hash cache
  from 0, < 4.5.0
• —Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning
  from 0, < 4.4.0
• —Zebra: addr/addrv2 Deserialization Resource Exhaustion
  from 0, < 4.3.1
• —Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks
  from 0, < 4.3.1
• —Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
  from 0, < 4.3.0
• —Zebra node crash — V5 transaction hash panic (P2P reachable)
  from 0, < 4.3.0