https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:49:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-104430 <p>Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd&#39;s accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra&#39;s inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.</p> <p>Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd&#39;s accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra&#39;s inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-104430 https://vulnerability.circl.lu/vuln/ghsa-4c53-mmm8-cf87 <p>Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd&#39;s accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra&#39;s inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.</p> <p>Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd&#39;s accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra&#39;s inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.</p> https://vulnerability.circl.lu/vuln/ghsa-4c53-mmm8-cf87