Skip to content
OpenAdvisories

Package · crates.io

zebra-state

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-52736

    ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache

    ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canonical body for the same block header hash. ZIP-244 permits the attacker to mutate co…

    ZcashFoundation zebra zebrad zebra-state crates.io