zebra-consensus vulnerabilities

2 known vulnerabilities in zebra-consensus from ZcashFoundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  zebrad: Comparison Using Wrong Factors

  CVE-2026-40880Apr 21, 2026ZcashFoundation

  ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By carefully submitting a transa

• 8.1 High severity

  zebra: Improper Verification of Cryptographic Signature

  CVE-2026-34377Mar 31, 2026ZcashFoundation

  ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-consensus version 5.0.1, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction'