TI-2026-26389 CVE-2026-34064 · GHSA-vc34-39q2-m6q3
nimiq-account: Vesting insufficient funds error can panic
Priority MEDIUM 41
nimiq-account contains account primitives to be used in Nimiq's Rust implementation.
nimiq
Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
nimiq records in CISA KEVNo nimiq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records in Nimiq Proof-of-stake · all components
TI-2026-25867 CVE-2026-33471 · GHSA-6973-8887-87ff
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
Priority MEDIUM 41
nimiq-block contains block primitives to be used in Nimiq's Rust implementation.
TI-2026-27598 CVE-2026-35468
nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26390 CVE-2026-34065 · GHSA-7c4j-2m43-2mgh
nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals
Priority LOW 39
nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation.
TI-2026-26388 CVE-2026-34063
network-libp2p: Peer can crash the node by opening discovery protocol substream twice
Priority LOW 39
Nimiq's network-libp2p is a Nimiq network implementation based on libp2p.
TI-2026-25612 CVE-2026-33184
nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-25114 CVE-2026-32605
Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer
Priority LOW 39
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-28921 CVE-2026-40093 · GHSA-49xc-52mp-cc9j
nimiq-blockchain is missing a wall-clock upper bound on block timestamps
Priority LOW 35
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.
TI-2026-22677 CVE-2026-28402
nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification
Priority LOW 31
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26394 CVE-2026-34069 · GHSA-48m6-486p-9j8p
nimiq-consensus panics via RequestMacroChain micro-block locator
Priority LOW 30
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26387 CVE-2026-34062
Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response
Priority LOW 30
nimiq-libp2p is a Nimiq network implementation based on libp2p.
TI-2026-26393 CVE-2026-34068 · GHSA-pf4j-pf3w-95f9
nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
Priority LOW 29
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.
TI-2026-26392 CVE-2026-34067 · GHSA-264v-m8fm-76jm
nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch
Priority LOW 29
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.
Priority LOW 28
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.
TI-2026-26391 CVE-2026-34066 · GHSA-j99g-7rqw-q9jg
nimiq-blockchain: Peer-triggerable panic during history sync
Priority LOW 24
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.