crates.io/zebra-consensus CVE-2026-40880: high, EPSS 0.44%
Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks
Action: Upgrade zebra-consensus to 5.0.2 or later.
cargo update -p zebra-consensus --precise 5.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.2 | - |
Fixed versions
| 5.0.2 |
Sources
- osv: GHSA-xvj8-ph7x-65gf
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-xvj8-ph7x-65gf
- https://nvd.nist.gov/vuln/detail/CVE-2026-40880
- https://github.com/ZcashFoundation/zebra
CVE-2026-40880 · published · modified · JSON