CVE-2026-104426

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remainingtransactionvalue that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactio...

CVE-2026-104426 Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remainingtransactionvalue that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactio...

CVE-2026-104426

Zebra versions before 6.1.0 are susceptible to an inefficient algorithmic complexity vulnerability (CWE-407) within the remaining_transaction_value function. The root cause is the cloning of the entire block-level spent-UTXO map for every transaction during contextual verification. This allows an...

PT-2026-104237

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining transaction value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input...