nimiq core-rs-albatross vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Latest nimiq core-rs-albatross vulnerabilities

CVE-2026-54542 — Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof (CVSS 3.7)
CVE-2026-54541 — Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys (CVSS 3.7)
CVE-2026-46369 — Nimiq: Validity store off by one error (CVSS 7.5)
CVE-2026-46545 — nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item (CVSS 7.5)
CVE-2026-46543 — nimiq-blockchain: Genesis batch set request (CVSS 5.3)
CVE-2026-46542 — nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points (CVSS 4.3)
CVE-2026-46541 — Nimiq network-libp2p: DHT query poisoning via first-record verification failure (CVSS 7.5)
CVE-2026-46540 — Nimiq light-blockchain: Light blockchain rebranch issue (CVSS 6.5)
CVE-2026-46539 — nimiq-primitives: BlockInclusionProof interlink issue when hops are empty (CVSS 5.9)
CVE-2026-44505 — Nimiq network-libp2p: Untrusted peer can wedge DHT (CVSS 5.3)
CVE-2026-40094 — nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses (CVSS 4.3)
CVE-2026-40092 — nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT (CVSS 7.5)
CVE-2025-47270 — nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability (CVSS 7.5)