nimiq vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202627

Newest CVEs

• CVE-2026-54541

  Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys

  nimiq · core-rs-albatross

  Low3.7
• CVE-2026-54542

  Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof

  nimiq · core-rs-albatross

  Low3.7
• CVE-2026-46369

  Nimiq: Validity store off by one error

  nimiq · core-rs-albatross

  High7.5
• CVE-2026-46545

  nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item

  nimiq · core-rs-albatross

  High7.5
• CVE-2026-46543

  nimiq-blockchain: Genesis batch set request

  nimiq · core-rs-albatross

  Medium5.3
• CVE-2026-46542

  nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points

  nimiq · core-rs-albatross

  Medium4.3
• CVE-2026-46541

  Nimiq network-libp2p: DHT query poisoning via first-record verification failure

  nimiq · core-rs-albatross

  High7.5
• CVE-2026-46540

  Nimiq light-blockchain: Light blockchain rebranch issue

  nimiq · core-rs-albatross

  Medium6.5
• CVE-2026-46539

  nimiq-primitives: BlockInclusionProof interlink issue when hops are empty

  nimiq · core-rs-albatross

  Medium5.9
• CVE-2026-44505

  Nimiq network-libp2p: Untrusted peer can wedge DHT

  nimiq · core-rs-albatross

  Medium5.3