crates.io/zebra-consensus CVE-2026-34377: high 8.1, EPSS 0.26%
Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
Action: Upgrade zebra-consensus to 5.0.1 or later.
cargo update -p zebra-consensus --precise 5.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.1 | - |
Fixed versions
| 5.0.1 |
Sources
- osv: GHSA-3vmh-33xr-9cqh#crates.io/zebra-consensus
- nvd: CVE-2026-34377
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3vmh-33xr-9cqh
- https://github.com/ZcashFoundation/zebra
- https://github.com/ZcashFoundation/zebra/releases/tag/v4.3.0
- https://zfnd.org/zebra-4-3-0-critical-security-fixes-zip-235-support-and-performance-improvements
- https://zips.z.cash/zip-0244
CVE-2026-34377 · published · modified · JSON