Skip to content
OpenAdvisories

Package · crates.io

zebra-consensus

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-52737

    ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block

    ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height i…

    ZcashFoundation zebra zebra-consensus zebrad crates.io