Nnimiq

Products

Exploited and recent CVEs

• CVE-2026-54541 Low 3.7 Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys 0.4%
• CVE-2026-54542 Low 3.7 Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof 0.4%
• CVE-2026-46369 High 7.5 Nimiq: Validity store off by one error 0.5%
• CVE-2026-46545 High 7.5 nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item 0.3%
• CVE-2026-46543 Medium 5.3 nimiq-blockchain: Genesis batch set request 0.3%
• CVE-2026-46542 Medium 4.3 nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points 0.2%
• CVE-2026-46541 High 7.5 Nimiq network-libp2p: DHT query poisoning via first-record verification failure 0.3%
• CVE-2026-46540 Medium 6.5 Nimiq light-blockchain: Light blockchain rebranch issue 0.3%
• CVE-2026-46539 Medium 5.9 nimiq-primitives: BlockInclusionProof interlink issue when hops are empty 0.1%
• CVE-2026-44505 Medium 5.3 Nimiq network-libp2p: Untrusted peer can wedge DHT 0.3%
• CVE-2026-40094 Medium 4.3 nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses 0.3%
• CVE-2026-40092 High 7.5 nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT 0.6%
• CVE-2026-34068 Medium 6.8 nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge 0.2%
• CVE-2026-34067 Low 3.1 nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch 0.3%
• CVE-2026-34066 Medium 5.3 nimiq-blockchain: Peer-triggerable panic during history sync 0.2%
• CVE-2026-34065 High 7.5 nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals 0.4%
• CVE-2026-34064 Medium 5.3 nimiq-account: Vesting insufficient funds error can panic 0.3%
• CVE-2026-34063 High 7.5 network-libp2p: Peer can crash the node by opening discovery protocol substream twice 0.4%
• CVE-2026-34062 Medium 5.3 Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response 0.3%
• CVE-2026-33471 Critical 9.6 nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation 0.2%
• CVE-2026-34069 Medium 5.3 nimiq-consensus panics via RequestMacroChain micro-block locator 0.3%
• CVE-2026-32605 High 7.5 Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer 0.5%
• CVE-2026-40093 High 8.1 nimiq-blockchain is missing a wall-clock upper bound on block timestamps 0.3%
• CVE-2026-35468 Medium 5.3 nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index 0.5%
• CVE-2026-33184 High 7.5 nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic 0.5%
• CVE-2026-34061 Medium 4.9 nimiq/core-rs-albatross: Macro block proposal interlink bug 0.2%
• CVE-2026-28402 High 7.1 nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification 0.2%
• CVE-2025-47270 High 7.5 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability 0.7%