CVE-2026-34063

CVE-2026-34063 affects Nimiq’s network-libp2p prior to v1.3.0. The discovery mechanism assumes at most one inbound and one outbound substream per connection; if a remote peer opens the discovery protocol substream a second time, the libp2p ConnectionHandler may panic with “Inbound already connect...