crates.io/zebra-chain CVE-2026-104436: low 3.7, EPSS 0.27%
zebrad vulnerable to getblocks/getheaders locator CPU amplification via uncapped vector length
Action: Upgrade zebra-chain to 8.0.0 or later.
cargo update -p zebra-chain --precise 8.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.0.0 | - |
Fixed versions
| 8.0.0 |
Sources
- osv: GHSA-443g-gwgp-49x4#crates.io/zebra-chain
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4
- https://github.com/ZcashFoundation/zebra/pull/10570
- https://github.com/ZcashFoundation/zebra/commit/8981a1b95d4807cad99e5bb3b94fc8bc723ac033
- https://github.com/ZcashFoundation/zebra
CVE-2026-104436 · published · modified · JSON