Skip to content
OpenAdvisories

Package · crates.io

zebra-network

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-44500

    ZEBRA: Allocation Amplification in Inbound Network Deserializers

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to zebra-chain version 7.0.0, and prior to zebra-network version 6.0.0, several inbound deserialization paths in Zebra allocated buffers sized against generic transport or bl…

    ZcashFoundation zebra zebrad zebra-network crates.io
  • Medium 6.3
    CVE-2026-40881

    Zebra: addr/addrv2 Deserialization Resource Exhaustion

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-network version 5.0.1, when deserializing addr or addrv2 messages, which contain vectors of addresses, Zebra would fully deserialize them up to a maximum length (over 233,…

    ZcashFoundation zebrad zebra-network zebrad crates.io