CVE-2026-123559

Zebra versions prior to 7.0.0 are vulnerable to a Denial of Service (DoS) condition caused by an inefficient algorithmic complexity vulnerability (CWE-407). Unauthenticated peers can exhaust verification threads by submitting invalid transactions containing tens of thousands of transparent inputs...

CVE-2026-44497

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, the fix for CVE-2026-41583 introduced a separate issue due to insufficient error handling of the case where the sighash type is invalid, during sighash computation. Instead of...