Zcashfoundation Zebra-State

3 CVEs affecting Zcashfoundation Zebra-State. Latest disclosed: 2026-08-18. Critical: 0, High: 0.

Top CVEs affecting Zcashfoundation Zebra-State
CVESeverityScorePublishedSummary
CVE-2026-52733Medium6.52026-08-18ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave stale Sapling and Orchard note-commitment…
CVE-2026-52739Medium5.92026-08-18ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious block producer can terminate zebrad by placing the same shielded transaction in a n…
CVE-2026-527382026-08-18ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can p…