How many CVEs have a located fix in nimiq/core-rs-albatross?

27 published CVEs have a fix traced to functions in nimiq/core-rs-albatross, touching 84 functions across 47 files.

Which function in nimiq/core-rs-albatross has been patched by the most CVEs?

verify_rejects_proof_with_duplicate_keys in primitives/src/trie/trie_proof.rs has been changed by 1 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in nimiq/core-rs-albatross?

The median fix changes 50 lines. 37% of fixes change 20 lines or fewer, and 33% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

rust

#182 of 500 repositories

nimiq/core-rs-albatross

Name: nimiq/core-rs-albatross: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 14, 2026

27

CVE fixes located

Published CVEs

84

Functions patched

Distinct function sites

47

Files patched

Distinct source files

2025–2026

Years covered

By CVE publication date

Overview

27 published CVEs have a fix traced to functions in nimiq/core-rs-albatross, the earliest published in 2025. Those fixes changed 84 distinct functions across 47 files, in 226 patch hunks.

Among the 500 repositories tracked here, nimiq/core-rs-albatross ranks #182 by the number of CVEs with a located fix.

Most patched functions

Functions in nimiq/core-rs-albatross changed by the most CVE fixes.

Most patched files

Files in nimiq/core-rs-albatross changed by the most CVE fixes.

1consensus/src/messages/handlers.rs3 CVEs · 4 functions
2blockchain/src/blockchain/verify.rs2 CVEs · 4 functions
3network-libp2p/src/swarm.rs2 CVEs · 4 functions
4blockchain/src/history/history_store.rs2 CVEs · 3 functions
5network-libp2p/src/discovery/handler.rs2 CVEs · 3 functions
6primitives/block/src/equivocation_proof.rs2 CVEs · 3 functions
7primitives/trie/src/trie.rs2 CVEs · 3 functions
8primitives/block/src/tendermint.rs2 CVEs · 2 functions
9network-libp2p/src/error.rs2 CVEs · 1 functions
10keys/src/multisig/mod.rs1 CVEs · 4 functions

Fix size

How much code a CVE fix in nimiq/core-rs-albatross changes, with backports counted once.

50

Median lines changed

Added plus removed, per CVE

37%

Fixes of 20 lines or fewer

Share of CVE fixes

33%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in nimiq/core-rs-albatross, and the functions each fix changed.

Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys
CVE-2026-54541verify_rejects_proof_with_duplicate_keys get
Low · CVSS 3.7
EPSS 0.4%2026-09-14
Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
CVE-2026-54542put_chunk_rejects_oversized_child_suffix key_rejects_oversized_suffix checked_add_rejects_overflow
Low · CVSS 3.7
EPSS 0.4%2026-09-14
Nimiq: Validity store off by one error
CVE-2026-46369transaction_in_validity_window_works create_transaction_with_validity_start last_bn
High · CVSS 7.5
EPSS 0.5%2026-08-26
nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item
CVE-2026-46545put_chunk_rejects_root_keyed_item get_root
High · CVSS 7.5
EPSS 0.6%2026-06-09
nimiq-blockchain: Genesis batch set request
CVE-2026-46543prove_num_leaves ChainStore BatchSetError
Medium · CVSS 5.3
EPSS 0.5%2026-06-09
nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points
CVE-2026-46542From to_edwards_point new
Medium · CVSS 4.3
EPSS 0.4%2026-06-09
Nimiq network-libp2p: DHT query poisoning via first-record verification failure
CVE-2026-46541test_dht_record handle_dht_get store_dht_record
High · CVSS 7.5
EPSS 0.6%2026-06-09
Nimiq light-blockchain: Light blockchain rebranch issue
CVE-2026-46540LightBlockchain
Medium · CVSS 6.5
EPSS 0.4%2026-06-09
nimiq-primitives: BlockInclusionProof interlink issue when hops are empty
CVE-2026-46539references_block BlockInclusionProof
Medium · CVSS 5.9
EPSS 0.2%2026-06-09
Nimiq network-libp2p: Untrusted peer can wedge DHT
CVE-2026-44505abort_dht_get NetworkError NetworkInterface
Medium · CVSS 5.3
EPSS 0.5%2026-06-09
nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses
CVE-2026-40094map
Medium · CVSS 4.3
EPSS 0.4%2026-05-20
nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT
CVE-2026-40092tagged_verify_rejects_invalid_signature_lengths
High · CVSS 7.5
EPSS 0.8%2026-05-20

Get an alert for each new nimiq/core-rs-albatross CVE, with the patched functions and AI-written analysis.

Monitor core-rs-albatross CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

axios/axios27 CVEs bytecodealliance/wasmtime27 CVEs GNOME/gimp27 CVEs kanboard/kanboard27 CVEs MacWarrior/clipbucket-v527 CVEs RIOT-OS/RIOT27 CVEs saltstack/salt27 CVEs strukturag/libheif27 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in nimiq/core-rs-albatross.

How many CVEs have a located fix in nimiq/core-rs-albatross?: 27 published CVEs have a fix traced to functions in nimiq/core-rs-albatross, touching 84 functions across 47 files.
Which function in nimiq/core-rs-albatross has been patched by the most CVEs?: verify_rejects_proof_with_duplicate_keys in primitives/src/trie/trie_proof.rs has been changed by 1 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in nimiq/core-rs-albatross?: The median fix changes 50 lines. 37% of fixes change 20 lines or fewer, and 33% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track nimiq/core-rs-albatross CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing