Skip to contentNimiq Proof-of-stake vulnerabilities
- nimiq network-libp2p, proof-of-stake +1 morenetwork-libp2p: Peer can crash the node by opening discovery protocol substream twiceCVE-2026-340637.5 High
- nimiq nimiq-blockchain, proof-of-stake +1 morenimiq-blockchain: Peer-triggerable panic during history syncCVE-2026-340665.3 Medium
- nimiq network-libp2p, proof-of-stake +1 moreNimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/responseCVE-2026-340625.3 Medium
- nimiq nimiq-transaction, proof-of-stake +1 morenimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledgeCVE-2026-340686.8 Medium
- nimiq nimiq-transaction, proof-of-stake +1 morenimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatchCVE-2026-340673.1 Low
- nimiq nimiq-primitives, proof-of-stake +1 morenimiq-primitives: Node crash due to missing interlink validation in election macro block proposalsCVE-2026-340657.5 High
- nimiq nimiq-account, proof-of-stake +1 morenimiq-account: Vesting insufficient funds error can panicCVE-2026-340645.3 Medium
- nimiq nimiq-block, proof-of-stake +1 morenimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncationCVE-2026-33471Fix available9.6 Critical
- nimiq core-rs-albatross, proof-of-stake +1 moreNimiq: Remote crash via off-by-one signer bounds check in proposal bufferCVE-2026-326057.5 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-consensus panics via RequestMacroChain micro-block locatorCVE-2026-340695.3 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-blockchain is missing a wall-clock upper bound on block timestampsCVE-2026-400938.1 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history indexCVE-2026-354685.3 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panicCVE-2026-331847.5 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Macro block proposal interlink bugCVE-2026-340614.9 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verificationCVE-2026-284027.1 High