CVE-2026-54541
- EPSS 0.28%
- Veröffentlicht 14.09.2026 15:30:51
- Zuletzt bearbeitet 30.09.2026 17:51:56
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk proof containing two TrieProofNode val...
CVE-2026-54542
- EPSS 0.28%
- Veröffentlicht 14.09.2026 15:29:45
- Zuletzt bearbeitet 30.09.2026 17:51:56
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk whose proof contains a TrieNodeChild s...
CVE-2026-46369
- EPSS 0.39%
- Veröffentlicht 26.08.2026 19:32:46
- Zuletzt bearbeitet 09.09.2026 21:09:13
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction...
CVE-2026-46545
- EPSS 0.34%
- Veröffentlicht 09.06.2026 23:47:51
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote, unauthenticated denial-of-service vulnerability in MerkleRadixTrie::put_chunk allows any state-sync peer...
CVE-2026-46543
- EPSS 0.29%
- Veröffentlicht 09.06.2026 23:47:32
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sending a RequestBatchSet message containing the genesis block's hash. Th...
CVE-2026-46542
- EPSS 0.23%
- Veröffentlicht 09.06.2026 23:46:21
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists in the Ed25519 multisig delinearization code path. Ed25519PublicKey::deli...
CVE-2026-46541
- EPSS 0.35%
- Veröffentlicht 09.06.2026 23:45:38
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), the DhtResults accumulator is only initialized when the first DHT record passes verification...
CVE-2026-46540
- EPSS 0.26%
- Veröffentlicht 09.06.2026 23:45:01
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a fork chain whose tip is a macro block (checkpoint or election), it only ...
CVE-2026-46539
- EPSS 0.15%
- Veröffentlicht 09.06.2026 23:44:34
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a logic flaw in BlockInclusionProof::is_block_proven causes the function to return true without performing any cry...
CVE-2026-44505
- EPSS 0.3%
- Veröffentlicht 09.06.2026 23:44:20
- Zuletzt bearbeitet 23.07.2026 09:10:00
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-libp2p handles kad get-record query progress in handle_dht_get (network-libp2p/src/swarm.rs). Prior to version 1.4.0, when a peer ...