Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

Fix availableCritical · CVSS 9.3EPSS 0.51%

Published Jul 2, 2026 · updated Sep 30, 2026

What to do

  1. Upgrade to a fixed version: zebra-script 7.0.0, zebrad 4.5.0.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

crates.iozebra-script

Vulnerable versions
<= 6.0.1
Fixed in
7.0.0

Check your project: cargo tree -i zebra-script

crates.iozebrad

Vulnerable versions
<= 4.4.1
Fixed in
4.5.0

Check your project: cargo tree -i zebrad

Sources

CWE-684 Incorrect Provision of Specified Functionality

← All critical vulnerabilities