Electric Coin Co. became aware of a security announcement on the bitcoin-dev mailing list this morning (8th November). Upon investigation, the team found that versions of Zcashd prior to 2.1.0-1 suffered from the above bug, CVE-2017-18350. Zcashd version 2.1.0-1 contains a fix for this issue.