GHSA-h9cc-w26m-j342
Medium · 4.3CVSS
4.3
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | nimiq-keys | 0 | 1.4.0 |
Related vulnerabilities
- CVE-2026-46542 Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the… Same vulnerability
- CVE-2026-40092 nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Also affects nimiq-keys
- GHSA-27w2-87xv-37c6 nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote… Also affects nimiq-keys
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-617
- CVE-2026-105753 vLLM is an inference and serving engine for large language models. CWE-617
- CVE-2026-98151 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG… CWE-617
- CVE-2026-84450 libheif is a HEIF and AVIF file format decoder and encoder. CWE-617
- CVE-2026-8674 Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN… CWE-617