Threats affecting pkg:github/zcash/zcash

A vulnerability in Zcash zcashd versions before 6.12.0 allows acceptance of invalid transactions due to improper verification of Sprout proofs. This flaw could potentially lead to the draining of user funds from the Sprout pool. The issue is classified as CWE-358, indicating an improperly implemented security check. The CVSS score is 3.5, reflecting a low severity with limited impact and exploitation complexity. No official patch or remediation guidance is currently confirmed from the vendor. There are no known exploits in the wild at this time.