https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-16930.htmlhttps://patchthecve.com/cve/CVE-2019-16930.htmlWed, 17 Jun 2026 02:22:59 +0000MEDIUM 5.3: Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.https://patchthecve.com/cve/CVE-2019-11636.htmlhttps://patchthecve.com/cve/CVE-2019-11636.htmlWed, 17 Jun 2026 02:13:19 +0000HIGH 7.5: Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.https://patchthecve.com/cve/CVE-2019-7167.htmlhttps://patchthecve.com/cve/CVE-2019-7167.htmlWed, 17 Jun 2026 02:40:12 +0000HIGH 7.5: Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a consisten