crates.io/zebrad CVE-2026-44497: critical 9.1, EPSS 0.19%

Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

Action: Upgrade zebrad to 4.4.0 or later.

cargo update -p zebrad --precise 4.4.0

Affected

Fixed versions

Sources

• osv: GHSA-gq4h-3grw-2rhv#crates.io/zebrad
• https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-gq4h-3grw-2rhv
• https://nvd.nist.gov/vuln/detail/CVE-2026-44497
• https://github.com/ZcashFoundation/zebra
• https://github.com/ZcashFoundation/zebra/releases/tag/v4.4.0

CVE-2026-44497 · published 2026-05-07T20:56:21Z · modified 2026-05-13T13:51:55.152295Z · JSON