CVE-2026-46545
- EPSS 0.34%
- Veröffentlicht 09.06.2026 23:47:51
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote, unauthenticated denial-of-service vulnerability in MerkleRadixTrie::put_chunk allows any state-sync peer...
CVE-2026-46543
- EPSS 0.29%
- Veröffentlicht 09.06.2026 23:47:32
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sending a RequestBatchSet message containing the genesis block's hash. Th...
CVE-2026-46542
- EPSS 0.23%
- Veröffentlicht 09.06.2026 23:46:21
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists in the Ed25519 multisig delinearization code path. Ed25519PublicKey::deli...
CVE-2026-46541
- EPSS 0.35%
- Veröffentlicht 09.06.2026 23:45:38
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), the DhtResults accumulator is only initialized when the first DHT record passes verification...
CVE-2026-46540
- EPSS 0.26%
- Veröffentlicht 09.06.2026 23:45:01
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a fork chain whose tip is a macro block (checkpoint or election), it only ...
CVE-2026-46539
- EPSS 0.15%
- Veröffentlicht 09.06.2026 23:44:34
- Zuletzt bearbeitet 10.06.2026 19:37:41
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a logic flaw in BlockInclusionProof::is_block_proven causes the function to return true without performing any cry...
CVE-2026-44505
- EPSS 0.3%
- Veröffentlicht 09.06.2026 23:44:20
- Zuletzt bearbeitet 10.06.2026 20:58:26
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-libp2p handles kad get-record query progress in handle_dht_get (network-libp2p/src/swarm.rs). Prior to version 1.4.0, when a peer ...
CVE-2026-40094
- EPSS 0.3%
- Veröffentlicht 20.05.2026 21:27:40
- Zuletzt bearbeitet 21.05.2026 16:04:53
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerContact updates from untrusted peers and stores them in a peer contact book, eventually leadi...
CVE-2026-40092
- EPSS 0.63%
- Veröffentlicht 20.05.2026 21:16:40
- Zuletzt bearbeitet 21.05.2026 16:04:53
nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record. The maliciously crafted record would ...
CVE-2026-33471
- EPSS 0.22%
- Veröffentlicht 22.04.2026 19:13:04
- Zuletzt bearbeitet 24.04.2026 17:11:40
nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::verify` computes its quorum check using `BitSet.len()`, then iterates `BitSet` indices and casts each `usize` index to `u16` (`slot as u16`) for slot lo...