Skip to content
OpenAdvisories

Product · ZcashFoundation

zebra-network

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-40881

    Zebra: addr/addrv2 Deserialization Resource Exhaustion

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-network version 5.0.1, when deserializing addr or addrv2 messages, which contain vectors of addresses, Zebra would fully deserialize them up to a maximum length (over 233,…

    ZcashFoundation zebrad zebra-network zebrad crates.io