Skip to contentNimiq Core-rs-albatross vulnerabilities
- nimiq core-rs-albatrossNimiq: Validity store off by one errorCVE-2026-46369Fix available7.5 High
- nimiq core-rs-albatrossNimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proofCVE-2026-54542Fix available3.7 Low
- nimiq core-rs-albatrossNimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keysCVE-2026-54541Fix available3.7 Low
- nimiq core-rs-albatrossNimiq network-libp2p: DHT query poisoning via first-record verification failureCVE-2026-465417.5 High
- nimiq core-rs-albatrossNimiq light-blockchain: Light blockchain rebranch issueCVE-2026-465406.5 Medium
- nimiq core-rs-albatrossNimiq network-libp2p: Untrusted peer can wedge DHTCVE-2026-445055.3 Medium
- nimiq core-rs-albatrossnimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed itemCVE-2026-46545Fix available7.5 High
- nimiq core-rs-albatrossnimiq-blockchain: Genesis batch set requestCVE-2026-46543Fix available5.3 Medium
- nimiq core-rs-albatrossnimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve pointsCVE-2026-46542Fix available4.3 Medium
- nimiq core-rs-albatrossnimiq-primitives: BlockInclusionProof interlink issue when hops are emptyCVE-2026-465395.9 Medium
- nimiq core-rs-albatrossnimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addressesCVE-2026-400944.3 Medium
- nimiq core-rs-albatrossnimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHTCVE-2026-400927.5 High
- nimiq core-rs-albatross, proof-of-stake +1 moreNimiq: Remote crash via off-by-one signer bounds check in proposal bufferCVE-2026-326057.5 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-consensus panics via RequestMacroChain micro-block locatorCVE-2026-340695.3 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-blockchain is missing a wall-clock upper bound on block timestampsCVE-2026-400938.1 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history indexCVE-2026-354685.3 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panicCVE-2026-331847.5 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Macro block proposal interlink bugCVE-2026-340614.9 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verificationCVE-2026-284027.1 High
- nimiq core-rs-albatrossnimiq-network-libp2p Uncontrolled Resource Consumption vulnerabilityCVE-2025-472707.5 High