nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-46539 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-46539 Source advisory: GHSA-799F-29JM-GR6C...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-46539 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-46539 Source advisory: OSV:GHSA-799F-29JM-GR6C...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +9 more potentially affected by CVE-2026-40092 via nimiq-keys (>=0.1.0, <=0.2.0)

nimiq-keys CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-40092 Source advisory: GHSA-27W2-87XV-37C6...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +9 more potentially affected by CVE-2026-40092 via nimiq-keys (>=0.1.0, <=0.2.0)

nimiq-keys CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-40092 Source advisory: OSV:GHSA-27W2-87XV-37C6...

CVE-2026-34064

The CVE-2026-34064 issue affects Nimiq-account’s VestingContract in the Rust implementation. Before v1.3.0, VestingContract::can_change_balance can produce AccountError::InsufficientFunds and builds the error with balance = self.balance - min_cap; if min_cap &gt; balance, Coin::sub underflows and...

CVE-2026-34064 nimiq-account: Vesting insufficient funds error can panic

nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, VestingContract::canchangebalance returns AccountError::InsufficientFunds when newbalance balance, the node crashes while trying to return an error. The mincap balance precondition is...

CVE-2026-34064 nimiq-account: Vesting insufficient funds error can panic

nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, VestingContract::canchangebalance returns AccountError::InsufficientFunds when newbalance balance, the node crashes while trying to return an error. The mincap balance precondition is...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34068 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34068 Source advisory: OSV:GHSA-PF4J-PF3W-95F9...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34067 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34067 Source advisory: GHSA-264V-M8FM-76JM...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34067 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34067 Source advisory: OSV:GHSA-264V-M8FM-76JM...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-34065 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34065 Source advisory: GHSA-7C4J-2M43-2MGH...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-34065 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34065 Source advisory: OSV:GHSA-7C4J-2M43-2MGH...

nimiq-accounts (>=0.1.0, <=0.2.0), nimiq-block (>=0.1.0, <=0.2.0) +5 more potentially affected by CVE-2026-34064 via nimiq-account (>=0.1.0, <=0.2.0)

nimiq-account CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34064 Source advisory: GHSA-VC34-39Q2-M6Q3...

nimiq-accounts (>=0.1.0, <=0.2.0), nimiq-block (>=0.1.0, <=0.2.0) +5 more potentially affected by CVE-2026-34064 via nimiq-account (>=0.1.0, <=0.2.0)

nimiq-account CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34064 Source advisory: OSV:GHSA-VC34-39Q2-M6Q3...

CVE-2026-34064: Integer Underflow (Wrap or Wraparound)

nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, VestingContract::canchangebalance returns AccountError::InsufficientFunds when newbalance balance, the node crashes while trying to return an error. The mincap balance precondition is...