Advisory Database
  • Advisories
  • Dependency Scanning
  1. cargo
  2. ›
  3. zebrad
  4. ›
  5. GHSA-29x4-r6jv-ff4w

GHSA-29x4-r6jv-ff4w: Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients

April 18, 2026

A vulnerability in Zebra’s JSON-RPC HTTP middleware allows an authenticated RPC client to cause a Zebra node to crash by disconnecting before the request body is fully received. The node treats the failure to read the HTTP request body as an unrecoverable error and aborts the process instead of returning an error response.

References

  • github.com/ZcashFoundation/zebra
  • github.com/ZcashFoundation/zebra/security/advisories/GHSA-29x4-r6jv-ff4w
  • github.com/advisories/GHSA-29x4-r6jv-ff4w

Code Behaviors & Features

Detect and mitigate GHSA-29x4-r6jv-ff4w with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 2.2.0 before 4.3.1

Fixed versions

  • 4.3.1

Solution

Upgrade to version 4.3.1 or above.

Impact 6.8 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Learn more about CVSS

Weakness

  • CWE-248: Uncaught Exception
  • CWE-617: Reachable Assertion

Source file

cargo/zebrad/GHSA-29x4-r6jv-ff4w.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 19 Apr 2026 00:17:38 +0000.