tocsin

CVE-2026-52737

2 advisories.

crates.io/zebra-consensus CVE-2026-52737: medium 5.3, EPSS 0.26%

Zebra has sync restart poisoning from single unauthenticated peer via above-lookahead block

Action: Upgrade zebra-consensus to 7.0.0 or later.

cargo update -p zebra-consensus --precise 7.0.0

Affected

introducedfixedlast affected
07.0.0-

Fixed versions

7.0.0

Sources

CVE-2026-52737 · published · modified · JSON

crates.io/zebrad CVE-2026-52737: medium 5.3, EPSS 0.26%

Zebra has sync restart poisoning from single unauthenticated peer via above-lookahead block

Action: Upgrade zebrad to 4.5.0 or later.

cargo update -p zebrad --precise 4.5.0

Affected

introducedfixedlast affected
04.5.0-

Fixed versions

4.5.0

Sources

CVE-2026-52737 · published · modified · JSON