Skip to content
Nimiq vulnerabilities
Newest
-
nimiq core-rs-albatross
Nimiq: Validity store off by one error
CVE-2026-46369
Fix available
7.5 High
-
nimiq core-rs-albatross
Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
CVE-2026-54542
Fix available
3.7 Low
-
nimiq core-rs-albatross
Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys
CVE-2026-54541
Fix available
3.7 Low
-
nimiq core-rs-albatross
Nimiq network-libp2p: DHT query poisoning via first-record verification failure
CVE-2026-46541
7.5 High
-
nimiq core-rs-albatross
Nimiq light-blockchain: Light blockchain rebranch issue
CVE-2026-46540
6.5 Medium
-
nimiq core-rs-albatross
Nimiq network-libp2p: Untrusted peer can wedge DHT
CVE-2026-44505
5.3 Medium
-
nimiq core-rs-albatross
nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item
CVE-2026-46545
Fix available
7.5 High
-
nimiq core-rs-albatross
nimiq-blockchain: Genesis batch set request
CVE-2026-46543
Fix available
5.3 Medium
-
nimiq core-rs-albatross
nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points
CVE-2026-46542
Fix available
4.3 Medium
-
nimiq core-rs-albatross
nimiq-primitives: BlockInclusionProof interlink issue when hops are empty
CVE-2026-46539
5.9 Medium
-
nimiq core-rs-albatross
nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses
CVE-2026-40094
4.3 Medium
-
nimiq core-rs-albatross
nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT
CVE-2026-40092
7.5 High
-
nimiq network-libp2p, proof-of-stake +1 more
network-libp2p: Peer can crash the node by opening discovery protocol substream twice
CVE-2026-34063
7.5 High
-
nimiq nimiq-blockchain, proof-of-stake +1 more
nimiq-blockchain: Peer-triggerable panic during history sync
CVE-2026-34066
5.3 Medium
-
nimiq network-libp2p, proof-of-stake +1 more
Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response
CVE-2026-34062
5.3 Medium
-
nimiq nimiq-transaction, proof-of-stake +1 more
nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
CVE-2026-34068
6.8 Medium
-
nimiq nimiq-transaction, proof-of-stake +1 more
nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch
CVE-2026-34067
3.1 Low
-
nimiq nimiq-primitives, proof-of-stake +1 more
nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals
CVE-2026-34065
7.5 High
-
nimiq nimiq-account, proof-of-stake +1 more
nimiq-account: Vesting insufficient funds error can panic
CVE-2026-34064
5.3 Medium
-
nimiq nimiq-block, proof-of-stake +1 more
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
CVE-2026-33471
Fix available
9.6 Critical
-
nimiq core-rs-albatross, proof-of-stake +1 more
Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer
CVE-2026-32605
7.5 High
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq-consensus panics via RequestMacroChain micro-block locator
CVE-2026-34069
5.3 Medium
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq-blockchain is missing a wall-clock upper bound on block timestamps
CVE-2026-40093
8.1 High
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index
CVE-2026-35468
5.3 Medium
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic
CVE-2026-33184
7.5 High
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq/core-rs-albatross: Macro block proposal interlink bug
CVE-2026-34061
4.9 Medium
-
nimiq core-rs-albatross, proof-of-stake +1 more
nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification
CVE-2026-28402
7.1 High
-
nimiq core-rs-albatross
nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability
CVE-2025-47270
7.5 High