What’s Vulnerable › Products

nimiq-transaction vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your nimiq-transaction version is affected

Latest nimiq-transaction vulnerabilities

• CVE-2026-34068 — nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge (CVSS 6.8)
• CVE-2026-34067 — nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch (CVSS 6.5)
• CVE-2026-34066 — nimiq-blockchain: Peer-triggerable panic during history sync (CVSS 5.3)
• CVE-2026-34065 — nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals (CVSS 7.5)
• CVE-2026-34064 — nimiq-account: Vesting insufficient funds error can panic (CVSS 8.2)
• CVE-2026-34063 — network-libp2p: Peer can crash the node by opening discovery protocol substream twice (CVSS 7.5)
• CVE-2026-34062 — Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response (CVSS 5.3)
• CVE-2026-33471 — nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation (CVSS 9.6)
• CVE-2026-34069 — nimiq-consensus panics via RequestMacroChain micro-block locator (CVSS 5.3)
• CVE-2026-32605 — Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer (CVSS 7.5)
• CVE-2026-40093 — nimiq-blockchain is missing a wall-clock upper bound on block timestamps (CVSS 8.1)
• CVE-2026-35468 — nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index (CVSS 7.5)
• CVE-2026-34061 — nimiq/core-rs-albatross: Macro block proposal interlink bug (CVSS 6.5)
• CVE-2026-33184 — nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic (CVSS 7.5)
• CVE-2026-28402 — nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification (CVSS 7.1)