zebrad vulnerabilities

2 known vulnerabilities in zebrad from ZcashFoundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  zebrad: Allocation of Resources Without Limits or Throttling

  CVE-2026-40881Apr 21, 2026ZcashFoundation

  ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-network version 5.0.1, when deserializing addr or addrv2 messages, which contain vectors of addresses, Zebra would fully deserialize them up to a maximum length (over 233,0

• 8.1 High severity

  zebrad: Comparison Using Wrong Factors

  CVE-2026-40880Apr 21, 2026ZcashFoundation

  ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By carefully submitting a transa