Skip to content
OpenAdvisories

Package · crates.io

nimiq-blockchain

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-46369

    Nimiq: Validity store off by one error

    Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::is_vali…

    nimiq core-rs-albatross nimiq-blockchain crates.io
  • High 8.1
    CVE-2026-40093

    nimiq-blockchain is missing a wall-clock upper bound on block timestamps

    nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp >= parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MIN_PRODUCER_TIMEOUT for s…

    nimiq core-rs-albatross nimiq-blockchain crates.io