zebra-network (crates.io)
Advisories
4
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 7.0.0 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p zebra-network --precise 7.0.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-63wg-wjjj-7cp8 Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update |
High EPSS 0.61% |
< 7.0.0 | 7.0.0 |
| GHSA-h72h-ppcx-998p Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length |
Low | < 7.0.0 | 7.0.0 |
| GHSA-438q-jx8f-cccv Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers |
Medium EPSS 0.36% |
< 6.0.0 | 6.0.0 |
| GHSA-xr93-pcq3-pxf8 Zebra: addr/addrv2 Deserialization Resource Exhaustion |
High EPSS 0.26% |
< 5.0.1 | 5.0.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor