tocsin

CVE-2026-104435

2 advisories.

crates.io/zebrad CVE-2026-104435: critical, EPSS 0.21%

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

Action: Upgrade zebrad to 4.4.1 or later.

cargo update -p zebrad --precise 4.4.1

Affected

introducedfixedlast affected
04.4.1-

Fixed versions

4.4.1

Sources

CVE-2026-104435 · published · modified · JSON

crates.io/zebra-script CVE-2026-104435: critical, EPSS 0.21%

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

Action: Upgrade zebra-script to 6.0.1 or later.

cargo update -p zebra-script --precise 6.0.1

Affected

introducedfixedlast affected
06.0.1-

Fixed versions

6.0.1

Sources

CVE-2026-104435 · published · modified · JSON