CVE-2026-34062

nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, MessageCodec::readrequest and readresponse call readtoend on inbound substreams, so a remote peer can send only a partial frame and keep the substream open. because Behaviour::new also sets...

PT-2026-34543

nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, MessageCodec::read request and read response call read to end on inbound substreams, so a remote peer can send only a partial frame and keep the substream open. because Behaviour::new also sets with max...

CVE-2025-47270

The CVE-2025-47270 entry concerns nimiq/core-rs-albatross, specifically the nimiq-network-libp2p subcrate. The vulnerability arises in Discovery message handling, which allocates a buffer based on a length value provided by the peer without an upper bound. Because the length is a u32, an attacker...