Zfnd vulnerabilities

Products

• Zebrad 8
• Zebra-chain 3
• Zebra 2
• Zebra-consensus 2
• Zebra-network 2
• Zebra-script 2

Newest

• zcashfoundation zebra, zfnd zebra-script, zebrad +2 more ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer CVE-2026-44497 Fix available 9.3 CriticalMay 7, 2026
• zcashfoundation zebra, zfnd zebra-chain, zebra-network +1 more +3 more ZEBRA: Allocation Amplification in Inbound Network Deserializers CVE-2026-44500 Fix available 5.3 MediumMay 7, 2026
• zcashfoundation zebra, zfnd zebrad +1 more ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops CVE-2026-44498 Fix available 9.2 CriticalMay 7, 2026
• zcashfoundation zebra, zfnd zebra-script, zebrad +2 more ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling CVE-2026-41583 Fix available 9.3 CriticalApril 18, 2026
• zcashfoundation zebra, zfnd zebra-rpc, zebrad +2 more ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients CVE-2026-41585 Fix available 6.9 MediumApril 18, 2026
• zcashfoundation zebra, zfnd zebra-chain, zebrad +2 more ZEBRA: rk Identity Point Panic in Transaction Verification CVE-2026-41584 Fix available 9.2 CriticalApril 18, 2026
• zcashfoundation zebra-network, zebrad +1 more Zebra: addr/addrv2 Deserialization Resource Exhaustion CVE-2026-40881 Fix available 6.3 MediumApril 18, 2026
• zcashfoundation zebra-consensus, zebrad +1 more Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks CVE-2026-40880 Fix available 7.2 HighApril 18, 2026
• zcashfoundation zebra, zebra-consensus +1 more Zebra has a Consensus Failure due to Improper Verification of V5 Transactions CVE-2026-34377 Fix available 8.4 HighMarch 30, 2026
• zcashfoundation zebra, zebra-chain +1 more Zebra node crash — V5 transaction hash panic (P2P reachable) CVE-2026-34202 Fix available 9.2 CriticalMarch 27, 2026