Skip to content
OpenAdvisories

Package · crates.io

nimiq-keys

2 known vulnerabilities.

2 results · Feed

  • Medium 4.3

    nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points

    Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists in the Ed25519 multisig delinearization code path. Ed25519PublicKey::delinearize()…

  • High 7.5

    nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

    nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record. The maliciously crafted record would contain a…