Nimiq

25 CVEs across 8 Nimiq products. Browse Nimiq vulnerabilities, severities, and proof-of-concept exploits.

Nimiq products with known CVEs

ProductCVEs
Core-Rs-Albatross17
Nimiq Proof-Of-Stake15
Network-Libp2p2
Nimiq-Transaction2
Nimiq-Account1
Nimiq-Block1
Nimiq-Blockchain1
Nimiq-Primitives1
Nimiq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-46545High7.52026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote, unauthenticat…
CVE-2026-46543Medium5.32026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash…
CVE-2026-46542Medium4.32026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vul…
CVE-2026-46541High7.52026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), t…
CVE-2026-46540Medium6.52026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::r…
CVE-2026-46539Medium5.92026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a logic flaw in BlockIn…
CVE-2026-44505Medium5.32026-06-10Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-libp2p handles kad get-record query pro…
CVE-2026-40094Medium4.32026-05-20nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerCo…
CVE-2026-40092High7.52026-05-20nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq f…
CVE-2026-34068Medium6.82026-04-22nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, the staking contract accepts `UpdateVal…
CVE-2026-34067Low3.12026-04-22nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryTreeProof::verify` panics on a…
CVE-2026-34066Medium5.32026-04-22nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryStore::put_historic_txns` uses an `assert!`…
CVE-2026-34065High7.52026-04-22nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation. Prior to version 1.3.0, an untrusted p2p pe…
CVE-2026-34064Medium5.32026-04-22nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `VestingContract::can_change_balance` returns `Acc…
CVE-2026-34063High7.52026-04-22Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `network-libp2p` discovery uses a libp2p `ConnectionHandler`…
CVE-2026-34062Medium5.32026-04-22nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCodec::read_request` and `read_response` call `read_to_end()` o…
CVE-2026-33471Critical9.62026-04-22nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::verify` computes its quorum check using `BitSet.len()`, then…
CVE-2026-34069Medium5.32026-04-14nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below…
CVE-2026-32605High7.52026-04-13nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an un…
CVE-2026-40093High8.12026-04-09nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp >=…
CVE-2026-35468Medium5.32026-04-03nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two p…
CVE-2026-34061Medium4.92026-04-03nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an el…
CVE-2026-33184High7.52026-04-03nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, the d…
CVE-2026-28402High7.12026-02-27nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a mal…
CVE-2025-47270High7.52025-05-12nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The `nimiq-network-libp2p` su…