TI-2026-26389 CVE-2026-34064 · GHSA-vc34-39q2-m6q3
nimiq-account: Vesting insufficient funds error can panic
Priority MEDIUM 41
nimiq-account contains account primitives to be used in Nimiq's Rust implementation.
nimiq
Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
nimiq records in CISA KEVNo nimiq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
28 records
TI-2026-25867 CVE-2026-33471 · GHSA-6973-8887-87ff
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
Priority MEDIUM 41
nimiq-block contains block primitives to be used in Nimiq's Rust implementation.
TI-2026-34086 CVE-2026-46369 · GHSA-3763-qp59-59vf
Nimiq: Validity store off by one error
Priority MEDIUM 40
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-28920 CVE-2026-40092 · GHSA-27w2-87xv-37c6
nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT
Priority MEDIUM 40
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.
Priority MEDIUM 40
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-34224 CVE-2026-46545 · GHSA-mw3q-r9wh-h2ff
nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item
Priority LOW 39
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-34220 CVE-2026-46541
Nimiq network-libp2p: DHT query poisoning via first-record verification failure
Priority LOW 39
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-27598 CVE-2026-35468
nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26390 CVE-2026-34065 · GHSA-7c4j-2m43-2mgh
nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals
Priority LOW 39
nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation.
TI-2026-26388 CVE-2026-34063
network-libp2p: Peer can crash the node by opening discovery protocol substream twice
Priority LOW 39
Nimiq's network-libp2p is a Nimiq network implementation based on libp2p.
TI-2026-25612 CVE-2026-33184
nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-25114 CVE-2026-32605
Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-28921 CVE-2026-40093 · GHSA-49xc-52mp-cc9j
nimiq-blockchain is missing a wall-clock upper bound on block timestamps
Priority LOW 35
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.
Priority LOW 34
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-22677 CVE-2026-28402
nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification
Priority LOW 31
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-34222 CVE-2026-46543 · GHSA-vghx-352f-93jm
nimiq-blockchain: Genesis batch set request
Priority LOW 30
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
Priority LOW 30
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26394 CVE-2026-34069 · GHSA-48m6-486p-9j8p
nimiq-consensus panics via RequestMacroChain micro-block locator
Priority LOW 30
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26387 CVE-2026-34062
Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response
Priority LOW 30
nimiq-libp2p is a Nimiq network implementation based on libp2p.
TI-2026-26393 CVE-2026-34068 · GHSA-pf4j-pf3w-95f9
nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
Priority LOW 29
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.
TI-2026-26392 CVE-2026-34067 · GHSA-264v-m8fm-76jm
nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch
Priority LOW 29
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.
Priority LOW 28
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-34218 CVE-2026-46539 · GHSA-799f-29jm-gr6c
nimiq-primitives: BlockInclusionProof interlink issue when hops are empty
Priority LOW 25
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26391 CVE-2026-34066 · GHSA-j99g-7rqw-q9jg
nimiq-blockchain: Peer-triggerable panic during history sync
Priority LOW 24
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.
TI-2026-34221 CVE-2026-46542 · GHSA-h9cc-w26m-j342
nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points
Priority LOW 20
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.