CVE-2026-34068

nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, the staking contract accepts "UpdateValidator" transactions that set "newvotingkey=Some..." while omitting "newproofofknowledge". this skips the proof-of-knowledge requirement...