crates.io/zebrad

Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients

Modified: 5/12/2026

zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Modified: 7/2/2026

Zebra has a Consensus Failure due to Improper Verification of V5 Transactions

Modified: 3/31/2026

Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers

Modified: 5/13/2026

zebrad vulnerable to getblocks/getheaders locator CPU amplification via uncapped vector length

Modified: 7/2/2026

Zebra has rk Identity Point Panic in Transaction Verification

Modified: 5/12/2026

zebrad has mempool transaction admission denial via single-peer inbound queue saturation

Modified: 7/2/2026

Zebra has block suppression via NU5 same-header body poisoning of sent-hash cache

Modified: 7/2/2026

Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update

Modified: 7/2/2026

zebrad has unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

Modified: 7/2/2026

Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling

Modified: 5/12/2026

zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers

Modified: 7/2/2026

Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs

Modified: 5/21/2026

zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

Modified: 7/2/2026

Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

Modified: 5/13/2026

Zebra has sync restart poisoning from single unauthenticated peer via above-lookahead block

Modified: 7/2/2026

Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length

Modified: 7/2/2026

Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning

Modified: 5/8/2026

Zebra: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection

Modified: 7/2/2026

Zebra's Block Validator Undercounts Coinbase and P2SH Sigops

Modified: 5/13/2026

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

Modified: 5/22/2026

Zebra node crash — V5 transaction hash panic (P2P reachable)

Modified: 3/31/2026

zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate

Modified: 7/2/2026

Zebra: Finalized address balance credit-first overflow on consensus-valid blocks

Modified: 7/2/2026

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

Modified: 7/6/2026

Zebra: addr/addrv2 Deserialization Resource Exhaustion

Modified: 5/5/2026

Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks

Modified: 5/5/2026