GHSA-pf4j-pf3w-95f9
Medium · 6.8CVSS
6.8
EPSS
—
Published
Apr 22, 2026
CISA due date
—
The record
nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | nimiq-transaction | 0 | No fix |
Related vulnerabilities
- CVE-2026-34068 nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust… Same vulnerability
- CVE-2026-34067 nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust… Also affects nimiq-transaction
- GHSA-264v-m8fm-76jm nimiq-transaction: Panic via `HistoryTreeProof` length mismatch Also affects nimiq-transaction
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102272 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102273 PyJWT is a Python implementation of JSON Web Token standards. CWE-347