Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

core-rs-albatross — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in core-rs-albatross, with AI-generated Chinese analysis, references, and POCs.

This page documents known security vulnerabilities, specifically categorized as core-rs-albatross weakness types within the core-rs-albatross product environment. It aggregates data from various vendor advisories and security researchers to provide a comprehensive view of identified flaws affecting this specific software component. The content covers vulnerabilities reported and published over the last several years, ensuring that both historical and recent security incidents are captured for thorough analysis. By visiting this resource, you can effectively track a vendor’s official advisories regarding core-rs-albatross to stay informed about critical patches and mitigations. Additionally, you can gain a deeper understanding of a specific weakness class by examining recurring patterns and exploit techniques associated with similar issues across the ecosystem. This page also allows you to look up a product’s vulnerability history, enabling security teams and developers to assess the long-term stability and security posture of core-rs-albatross. This historical context is essential for risk management, helping organizations prioritize remediation efforts based on the severity and prevalence of past issues. The aggregated information serves as a central reference point for evaluating the impact of these weaknesses on system integrity and data confidentiality. Users can review detailed descriptions, affected versions, and recommended actions to protect their infrastructure against known threats. This approach facilitates a more proactive stance in managing software supply chain risks and ensures that stakeholders have access to accurate, consolidated security intelligence.

Vendor: nimiq

CVE ID Title CVSS Severity Published
CVE-2026-54541 Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys CWE-248 3.7 Low 2026-09-14
CVE-2026-54542 Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof CWE-125 3.7 Low 2026-09-14
CVE-2026-46369 Nimiq: Validity store off by one error CWE-193 7.5 High 2026-08-26
CVE-2026-46545 nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item CWE-248 7.5 High 2026-06-09
CVE-2026-46543 nimiq-blockchain: Genesis batch set request CWE-617 5.3 Medium 2026-06-09
CVE-2026-46542 nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points CWE-617 4.3 Medium 2026-06-09
CVE-2026-46541 Nimiq network-libp2p: DHT query poisoning via first-record verification failure CWE-754 7.5 High 2026-06-09
CVE-2026-46540 Nimiq light-blockchain: Light blockchain rebranch issue CWE-841 6.5 Medium 2026-06-09
CVE-2026-46539 nimiq-primitives: BlockInclusionProof interlink issue when hops are empty CWE-345 5.9 Medium 2026-06-09
CVE-2026-44505 Nimiq network-libp2p: Untrusted peer can wedge DHT CWE-755 5.3 Medium 2026-06-09
CVE-2026-40094 nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses CWE-754 4.3 Medium 2026-05-20
CVE-2026-40092 nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT CWE-252 7.5 High 2026-05-20
CVE-2026-34069 nimiq-consensus panics via RequestMacroChain micro-block locator CWE-617 5.3 Medium 2026-04-13
CVE-2026-32605 Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer CWE-125 7.5 High 2026-04-13
CVE-2026-40093 nimiq-blockchain is missing a wall-clock upper bound on block timestamps CWE-1284 8.1 High 2026-04-09
CVE-2026-35468 nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index CWE-252 5.3 Medium 2026-04-03
CVE-2026-33184 nimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic CWE-191 7.5 High 2026-04-03
CVE-2026-34061 nimiq/core-rs-albatross: Macro block proposal interlink bug CWE-345 4.9 Medium 2026-04-03
CVE-2026-28402 nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification CWE-354 7.1 High 2026-02-27
CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability CWE-400 7.5 High 2025-05-12

All 20 known CVE vulnerabilities affecting core-rs-albatross with full Chinese analysis, references, and POCs where available.