{"action":"Upgrade zebra-consensus to 5.0.1 or later.","affected":[{"fixed":"5.0.1","introduced":"0"}],"component":"zebra-consensus","cve_ids":["CVE-2026-34377"],"ecosystem":"crates.io","epss":0.0026,"exploited":false,"fixed_versions":["5.0.1"],"ghsa_id":"GHSA-3vmh-33xr-9cqh","id":"tcs_01M5KES3MREZ6878AY9W8FAHW7","modified_at":"2026-03-31T19:04:49.014205Z","published_at":"2026-03-30T19:13:41Z","references":["https://osv.dev/vulnerability/GHSA-3vmh-33xr-9cqh","https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3vmh-33xr-9cqh","https://nvd.nist.gov/vuln/detail/CVE-2026-34377","https://github.com/ZcashFoundation/zebra","https://github.com/ZcashFoundation/zebra/releases/tag/v4.3.0","https://zfnd.org/zebra-4-3-0-critical-security-fixes-zip-235-support-and-performance-improvements","https://zips.z.cash/zip-0244"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-3vmh-33xr-9cqh#crates.io/zebra-consensus","url":"https://osv.dev/vulnerability/GHSA-3vmh-33xr-9cqh"},{"source":"nvd","source_id":"CVE-2026-34377","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34377"}],"summary":"Zebra has a Consensus Failure due to Improper Verification of V5 Transactions"}