crates.io/zebra-script CVE-2026-104435: high 7.4, EPSS 0.21%
Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output
Action: Upgrade zebra-script to 6.0.1 or later.
cargo update -p zebra-script --precise 6.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.1 | - |
Fixed versions
| 6.0.1 |
Sources
- osv: GHSA-pvmv-cwg8-v6c8#crates.io/zebra-script
- nvd: CVE-2026-104435
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8
- https://github.com/ZcashFoundation/zebra
CVE-2026-104435 · published · modified · JSON