Vulnerabilities in ZcashFoundation
52 resultsCVE-2026-104423HIGHZebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof VerificationEPSS 0.3%CVE-2026-123558HIGHZebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier RewindEPSS 0.3%CVE-2026-54496CRITICALMissing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundnessEPSS 0.3%CVE-2026-104427HIGHZebra before 6.1.0 Chain Stall via Stale parent_error_map EntryEPSS 0.3%CVE-2026-123557HIGHZebra zebrad before 7.0.0 Reachable Assertion DoS via Peer DisconnectionEPSS 0.3%CVE-2026-104426HIGHZebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value CheckEPSS 0.3%CVE-2026-104434HIGHZebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPCEPSS 0.3%CVE-2025-58359MEDIUMfrost-core: refresh shares with smaller min_signers will reduce group securityEPSS 0.3%CVE-2026-104425MEDIUMZebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed TransactionsEPSS 0.3%CVE-2026-104421MEDIUMZebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes LockoutEPSS 0.3%CVE-2026-104432MEDIUMZebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks ResponseEPSS 0.3%CVE-2026-104420MEDIUMZebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped BlocksEPSS 0.3%CVE-2026-123556MEDIUMZebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time ScoringEPSS 0.3%CVE-2026-104429MEDIUMZebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx MessagesEPSS 0.3%CVE-2026-44498CRITICALZEBRA: Block Validator Undercounts Coinbase and P2SH SigopsEPSS 0.3%CVE-2026-41583CRITICALZEBRA: Consensus Divergence in Transparent Sighash Hash-Type HandlingEPSS 0.3%CVE-2026-104424MEDIUMZebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplateEPSS 0.3%CVE-2026-104436MEDIUMZebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator LengthEPSS 0.3%CVE-2026-41584CRITICALZEBRA: rk Identity Point Panic in Transaction VerificationEPSS 0.3%CVE-2026-40881MEDIUMZebra: addr/addrv2 Deserialization Resource ExhaustionEPSS 0.3%