Is zebrad safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-ww9q-8r59-xv46 · 2026-07-06Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
• VulnerabilityGHSA-63wg-wjjj-7cp8 · 2026-07-02Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
• VulnerabilityGHSA-65jj-fmw8-468q · 2026-07-02zebrad has unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention
• VulnerabilityGHSA-2gf8-q9rr-jq3h · 2026-07-02zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip
• VulnerabilityGHSA-hhm7-qrv5-h4r6 · 2026-07-02Zebra: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection
• VulnerabilityGHSA-w834-cf6p-9m9w · 2026-07-02Zebra: Finalized address balance credit-first overflow on consensus-valid blocks
• VulnerabilityGHSA-gvjc-3w7c-92jx · 2026-07-02Zebra has sync restart poisoning from single unauthenticated peer via above-lookahead block
• VulnerabilityGHSA-gf9r-m956-97qx · 2026-07-02zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
• VulnerabilityGHSA-4m69-67m6-prqp · 2026-07-02Zebra has block suppression via NU5 same-header body poisoning of sent-hash cache
• VulnerabilityGHSA-h72h-ppcx-998p · 2026-07-02Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length
• VulnerabilityGHSA-4fc2-h7jh-287c · 2026-07-02zebrad has mempool transaction admission denial via single-peer inbound queue saturation
• VulnerabilityGHSA-c8w6-x74f-vmg3 · 2026-07-02zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers
• VulnerabilityGHSA-443g-gwgp-49x4 · 2026-07-02zebrad vulnerable to getblocks/getheaders locator CPU amplification via uncapped vector length
• VulnerabilityGHSA-qv2r-v3mx-f4pf · 2026-07-02zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate
• VulnerabilityGHSA-h9hm-m2xj-4rq9 · 2026-05-08Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning
• VulnerabilityGHSA-pvmv-cwg8-v6c8 · 2026-05-08Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output
• VulnerabilityGHSA-cwfq-rfcr-8hmp · 2026-05-07Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
• VulnerabilityGHSA-gq4h-3grw-2rhv · 2026-05-07Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer
• VulnerabilityGHSA-438q-jx8f-cccv · 2026-05-07Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers
• VulnerabilityGHSA-jv4h-j224-23cc · 2026-05-07Zebra's Block Validator Undercounts Coinbase and P2SH Sigops
• VulnerabilityGHSA-8m29-fpq5-89jj · 2026-04-18Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling
• VulnerabilityGHSA-29x4-r6jv-ff4w · 2026-04-18Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients
• VulnerabilityGHSA-452v-w3gx-72wg · 2026-04-18Zebra has rk Identity Point Panic in Transaction Verification
• VulnerabilityGHSA-xr93-pcq3-pxf8 · 2026-04-18Zebra: addr/addrv2 Deserialization Resource Exhaustion
• VulnerabilityGHSA-xvj8-ph7x-65gf · 2026-04-18Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks
• VulnerabilityGHSA-3vmh-33xr-9cqh · 2026-03-30Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
• VulnerabilityGHSA-qp6f-w4r3-h8wg · 2026-03-27Zebra node crash , V5 transaction hash panic (P2P reachable)

Check your version

Run cargo tree -i zebrad to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.