{"api_version":"v1","generated_at":"2026-10-09T08:30:00+00:00","product":{"cve_count":38,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-zcashfoundation-zebra-2e434b8dee25","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/zebra","name":"zebra","next_cursor":null,"observations":[{"affected":"zebra: < 4.4.0","affected_versions_present":true,"cve_id":"CVE-2026-104437","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104437","fixed":"zebra: 4.4.0","last_modified":"2026-10-06T02:42:57.596Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","primary_source":"","published":"2026-10-02T11:38:13.855Z"},{"affected":"zebra: < 4.5.0, < 8.0.0","affected_versions_present":true,"cve_id":"CVE-2026-104436","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104436","fixed":"zebra: 4.5.0, 8.0.0","last_modified":"2026-10-02T14:51:28.130Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4","primary_source":"","published":"2026-10-02T11:38:13.172Z"},{"affected":"zebra: 4.4.0 < 4.4.1, 6.0.0 < 6.0.1","affected_versions_present":true,"cve_id":"CVE-2026-104435","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104435","fixed":"zebra: 4.4.1, 6.0.1","last_modified":"2026-10-02T15:16:42.729Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8","primary_source":"","published":"2026-10-02T11:38:12.487Z"},{"affected":"zebra: < 8.0.0, < 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-104434","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104434","fixed":"zebra: 8.0.0, 4.5.0","last_modified":"2026-10-02T15:30:07.619Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3","primary_source":"","published":"2026-10-02T11:38:11.845Z"},{"affected":"zebra: < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2026-104432","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104432","fixed":"zebra: 6.3.0","last_modified":"2026-10-06T02:41:48.408Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h8m8-844p-v3m9","primary_source":"","published":"2026-10-02T11:38:11.214Z"},{"affected":"zebra: < 6.0.0","affected_versions_present":true,"cve_id":"CVE-2026-104431","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104431","fixed":"zebra: 6.0.0","last_modified":"2026-10-02T14:53:54.651Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-84j3-rw4c-gqmj","primary_source":"","published":"2026-10-02T11:38:10.560Z"},{"affected":"zebra: 4.5.0 < 4.5.1, 7.0.0 < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-104430","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104430","fixed":"zebra: 4.5.1, 7.0.1","last_modified":"2026-10-02T15:17:44.203Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2prc-cj5x-4443","primary_source":"","published":"2026-10-02T11:38:09.916Z"},{"affected":"zebra: < 6.0.0-rc.0","affected_versions_present":true,"cve_id":"CVE-2026-104429","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104429","fixed":"zebra: 6.0.0-rc.0","last_modified":"2026-10-02T12:27:23.589Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-m9xx-8rcj-vmgp","primary_source":"","published":"2026-10-02T11:38:09.257Z"},{"affected":"zebra: < 11.0.0","affected_versions_present":true,"cve_id":"CVE-2026-104428","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104428","fixed":"zebra: 11.0.0","last_modified":"2026-10-06T02:40:55.553Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x6v8-c2xp-928m","primary_source":"","published":"2026-10-02T11:38:08.558Z"},{"affected":"zebra: < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-104427","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104427","fixed":"zebra: 6.1.0","last_modified":"2026-10-05T14:53:45.275Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8gxx-hc65-vv82","primary_source":"","published":"2026-10-02T11:38:07.777Z"},{"affected":"zebra: < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-104426","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104426","fixed":"zebra: 6.1.0","last_modified":"2026-10-02T15:18:42.536Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4g24-549m-hp75","primary_source":"","published":"2026-10-02T11:38:07.187Z"},{"affected":"zebra: < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-104425","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104425","fixed":"zebra: 6.1.0","last_modified":"2026-10-02T15:35:22.404Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g7c4-2w6c-cr3r","primary_source":"","published":"2026-10-02T11:38:06.504Z"},{"affected":"zebra: < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-104424","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104424","fixed":"zebra: 6.1.0","last_modified":"2026-10-06T02:38:24.183Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-95m2-vx53-v2jw","primary_source":"","published":"2026-10-02T11:38:05.827Z"},{"affected":"zebra: < 6.2.1","affected_versions_present":true,"cve_id":"CVE-2026-104423","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104423","fixed":"zebra: 6.2.1","last_modified":"2026-10-02T15:55:54.144Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2p4c-3q4q-p463","primary_source":"","published":"2026-10-02T11:38:05.140Z"},{"affected":"zebra: < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2026-104422","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104422","fixed":"zebra: 6.3.0","last_modified":"2026-10-02T17:35:03.530Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g95h-hw6g-pvgv","primary_source":"","published":"2026-10-02T11:38:03.646Z"},{"affected":"zebra: < 6.2.1","affected_versions_present":true,"cve_id":"CVE-2026-104421","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104421","fixed":"zebra: 6.2.1","last_modified":"2026-10-02T12:28:10.585Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338","primary_source":"","published":"2026-10-02T11:38:02.456Z"},{"affected":"zebra: < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2026-104420","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104420","fixed":"zebra: 6.3.0","last_modified":"2026-10-06T02:37:15.210Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8hh2-hrf2-cqf4","primary_source":"","published":"2026-10-02T11:38:01.836Z"},{"affected":"zebra: < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2026-104419","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104419","fixed":"zebra: 6.3.0","last_modified":"2026-10-05T15:05:08.363Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-qhr3-cvch-5fh2","primary_source":"","published":"2026-10-02T11:38:01.103Z"},{"affected":"< 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-52829","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52829","fixed":"4.5.0.","last_modified":"2026-08-18T19:44:56.318Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-63wg-wjjj-7cp8","primary_source":"","published":"2026-08-18T19:27:57.318Z"},{"affected":"< 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-52736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52736","fixed":"4.5.0.","last_modified":"2026-08-18T19:38:44.395Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4m69-67m6-prqp","primary_source":"","published":"2026-08-18T19:26:40.575Z"},{"affected":"< 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-52732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52732","fixed":"4.5.0.","last_modified":"2026-08-18T19:32:31.103Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4fc2-h7jh-287c","primary_source":"","published":"2026-08-18T19:26:07.345Z"},{"affected":"< 4.5.0; < 8.0.0","affected_versions_present":true,"cve_id":"CVE-2026-52731","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52731","fixed":"4.5.0.","last_modified":"2026-08-18T19:42:08.415Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-qv2r-v3mx-f4pf","primary_source":"","published":"2026-08-18T19:25:39.314Z"},{"affected":"< 4.5.0; < 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-52733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52733","fixed":"4.5.0.","last_modified":"2026-08-19T15:20:18.272Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2gf8-q9rr-jq3h","primary_source":"","published":"2026-08-18T19:24:44.005Z"},{"affected":"< 4.5.0; < 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-52738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52738","fixed":"4.5.0.","last_modified":"2026-08-19T15:19:04.654Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-w834-cf6p-9m9w","primary_source":"","published":"2026-08-18T19:24:04.945Z"},{"affected":"< 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-52735","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52735","fixed":"4.5.0.","last_modified":"2026-08-18T19:48:45.150Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-gf9r-m956-97qx","primary_source":"","published":"2026-08-18T19:23:10.705Z"},{"affected":"< 4.5.0; < 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-52739","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52739","fixed":"4.5.0.","last_modified":"2026-08-19T18:20:38.270Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-hhm7-qrv5-h4r6","primary_source":"","published":"2026-08-18T19:22:19.865Z"},{"affected":"< 4.5.0","affected_versions_present":true,"cve_id":"CVE-2026-52734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52734","fixed":"4.5.0.","last_modified":"2026-08-19T18:20:44.085Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-65jj-fmw8-468q","primary_source":"","published":"2026-08-18T19:19:56.546Z"},{"affected":"< 4.5.0; < 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-52737","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52737","fixed":"4.5.0.","last_modified":"2026-08-18T19:33:34.092Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-gvjc-3w7c-92jx","primary_source":"","published":"2026-08-18T19:19:09.625Z"},{"affected":"< 5.0.0; < 0.5.0; < 0.14.0; < 0.28.0; < 6.20.0","affected_versions_present":true,"cve_id":"CVE-2026-54496","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54496","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-17T17:23:50.731Z","patch_url":"","primary_source":"","published":"2026-07-17T16:59:06.809Z"},{"affected":"< 4.4.0","affected_versions_present":true,"cve_id":"CVE-2026-44499","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44499","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T17:23:27.910Z","patch_url":"","primary_source":"","published":"2026-05-08T15:11:24.837Z"},{"affected":"zebrad < 4.4.0; zebra-chain < 7.0.0; zebra-network < 6.0.0","affected_versions_present":true,"cve_id":"CVE-2026-44500","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44500","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T19:41:46.471Z","patch_url":"","primary_source":"","published":"2026-05-08T15:10:21.516Z"},{"affected":"< 4.4.0","affected_versions_present":true,"cve_id":"CVE-2026-44498","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44498","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T21:32:52.062Z","patch_url":"","primary_source":"","published":"2026-05-08T15:09:09.919Z"},{"affected":"zebra-script < 6.0.0; zebrad < 4.4.0","affected_versions_present":true,"cve_id":"CVE-2026-44497","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44497","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T15:48:10.020Z","patch_url":"","primary_source":"","published":"2026-05-08T15:08:08.516Z"},{"affected":"zebra-rpc >= 1.0.0-beta.45, < 6.0.2; zebrad >= 2.2.0, < 4.3.1","affected_versions_present":true,"cve_id":"CVE-2026-41585","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41585","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T21:27:04.066Z","patch_url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-29x4-r6jv-ff4w","primary_source":"","published":"2026-05-08T15:06:15.309Z"},{"affected":"zebra-chain < 6.0.2; zebrad < 4.3.1","affected_versions_present":true,"cve_id":"CVE-2026-41584","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41584","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T16:04:49.931Z","patch_url":"","primary_source":"","published":"2026-05-08T15:05:06.070Z"},{"affected":"zebrad < 4.3.1; zebra-script < 5.0.2","affected_versions_present":true,"cve_id":"CVE-2026-41583","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41583","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T19:42:57.297Z","patch_url":"","primary_source":"","published":"2026-05-08T14:55:50.120Z"},{"affected":"< 4.3.0; < 5.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34377","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34377","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T17:18:12.932Z","patch_url":"","primary_source":"","published":"2026-03-31T14:05:59.959Z"},{"affected":"< 4.3.0; < 6.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34202","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34202","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T17:17:30.860Z","patch_url":"","primary_source":"","published":"2026-03-31T14:02:56.454Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"ZcashFoundation"}}