ZcashFoundation

Records52All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

ZcashFoundation records in CISA KEV

No ZcashFoundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zebrad 8 records MEDIUM Zebra-chain 3 records MEDIUM Zebra 2 records MEDIUM Zebra-consensus 2 records LOW Zebra-network 2 records MEDIUM Zebra-script 2 records MEDIUM Zebra-rpc 1 record LOW

Records

8 records in Zebrad · all components

TI-2026-29537 CVE-2026-40881 · GHSA-xr93-pcq3-pxf8

Zebra: addr/addrv2 Deserialization Resource Exhaustion

MEDIUM 61

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00263 Published 2026-04-21 Fixed in 4.3.1, 5.0.1 CWE-770

TI-2026-30136 CVE-2026-41583 · GHSA-8m29-fpq5-89jj

ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling

MEDIUM 48

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00278 Published 2026-05-08 Fixed in 4.3.1, 5.0.2 CWE-573

TI-2026-32432 CVE-2026-44498 · GHSA-jv4h-j224-23cc

ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops

MEDIUM 47

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00283 Published 2026-05-08 Fixed in 4.4.0 CWE-682

TI-2026-32431 CVE-2026-44497 · GHSA-gq4h-3grw-2rhv

ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

MEDIUM 45

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00188 Published 2026-05-08 Fixed in 6.0.0, 4.4.0 CWE-347

TI-2026-30137 CVE-2026-41584 · GHSA-452v-w3gx-72wg

ZEBRA: rk Identity Point Panic in Transaction Verification

MEDIUM 45

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00268 Published 2026-05-08 Fixed in 4.3.1, 6.0.2 CWE-617

TI-2026-29536 CVE-2026-40880 · GHSA-xvj8-ph7x-65gf

Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks

LOW 31

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00261 Published 2026-04-21 Fixed in 4.3.1, 5.0.2 CWE-1025

TI-2026-32434 CVE-2026-44500 · GHSA-438q-jx8f-cccv

ZEBRA: Allocation Amplification in Inbound Network Deserializers

LOW 30

ZEBRA is a Zcash node written entirely in Rust.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00362 Published 2026-05-08 Fixed in 6.0.0, 4.4.0 +1 CWE-770

TI-2026-30138 CVE-2026-41585 · GHSA-29x4-r6jv-ff4w

ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients

LOW 30

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00257 Published 2026-05-08 Fixed in 6.0.2, 4.3.1 CWE-248

Open these records in search →