Nimiq's software components contain vulnerabilities that could allow remote peers to cause nodes to panic or exploit weaknesses in the system.

🚨 EUVD-2026-25056 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: network-libp2p 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCodec::read_request` and `read_response` call `read_to_end()` on inbound substreams, so a remote peer can send only a partial frame and keep the substream op... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25056 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25058 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: network-libp2p 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `network-libp2p` discovery uses a libp2p `ConnectionHandler` state machine. the handler assumes there is at most one inbound and one outbound discovery sub... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25058 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25054 📊 Score: 9.6/10 (CVSS v3.1) 📦 Product: nimiq-block 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::verify` computes its quorum check using `BitSet.len()`, then iterates `BitSet` indices and casts each `usize` index to `u16` (`slot as u16`) for slot lookup. ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25054 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25062 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: nimiq-primitives 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation. Prior to version 1.3.0, an untrusted p2p peer can cause a node to panic by announcing an election macro block whose `validators` set co... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25062 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25064 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: nimiq-blockchain 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryStore::put_historic_txns` uses an `assert!` to enforce invariants about `HistoricTransaction.block_number` (must be within the macro bl... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25064 #cybersecurity #infosec #euvd #cve #vulnerability