Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-54496
  • github.com/zcash/halo2
  • github.com/zcash/librustzcash
  • github.com/zcash/orchard
  • github.com/zcash/zcash
  • github.com/zcashfoundation/zebra
 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 17 Jul
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-ww9q-8r59-xv46
  • crates.io/halo2_gadgets
  • crates.io/orchard
  • crates.io/zcash_primitives
  • crates.io/zebrad
 Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 06 Jul
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-35679
  • github.com/zcash/zcash
 See record for full details 05 Apr
  • Fix available
  • Severity - 3.5 (Low)
MAL-2025-50732
  • npm/zcash-easy-miner
 Malicious code in zcash-easy-miner (npm) 10 Nov 2025
  • No fix available
MAL-2022-1587
  • npm/bitcore-build-zcash
 Malicious code in bitcore-build-zcash (npm) 20 Jun 2022
  • No fix available
CVE-2019-16930
  • github.com/zcash/zcash
 See record for full details 28 Sep 2019
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2019-11636
  • github.com/zcash/zcash
 See record for full details 01 May 2019
  • No fix available
  • Severity - 7.5 (High)
CVE-2019-7167
  • github.com/zcash/zcash
 See record for full details 27 Mar 2019
  • No fix available
  • Severity - 7.5 (High)