Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

zebra-chain

4 known vulnerabilities (2 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 critical, 2 medium
Weekly downloads
1,565
Dependents
0
Registry
crates.io

Advisories 4

  • CVE-2026-104436Medium 6.3

    Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length

    Affected: fixed in 8.0.0.

  • CVE-2026-44500Medium 5.3

    ZEBRA: Allocation Amplification in Inbound Network Deserializers

    Affected: fixed in 7.0.0.

  • CVE-2026-41584Critical 9.2

    ZEBRA: rk Identity Point Panic in Transaction Verification

    Affected: fixed in 6.0.2.

  • CVE-2026-34202Critical 9.2

    Zebra node crash — V5 transaction hash panic (P2P reachable)

    Affected: fixed in 6.0.1.