zebra-script (crates.io)

Advisories

Latest version

—

License

—

OpenSSF Scorecard

—

How to fix

Upgrading to 7.0.0 or later clears every advisory below that has a fix.

Upgrade commands

cargo

cargo update -p zebra-script --precise 7.0.0

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-gf9r-m956-97qx zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser	Critical EPSS 0.51%	`< 7.0.0`	`7.0.0`
GHSA-pvmv-cwg8-v6c8 Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output	High EPSS 0.21%	`< 6.0.1`	`6.0.1`
GHSA-gq4h-3grw-2rhv Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer	Critical EPSS 0.19%	`< 6.0.0`	`6.0.0`
GHSA-8m29-fpq5-89jj Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling	Critical EPSS 0.28%	`< 5.0.2`	`5.0.2`

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor