Changes.Watch~ upgrade verdicts ~
Free digest
Research1 in 10 popular npm releases needed a hotfix

critical vulnerability

nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

Fix availableCritical · CVSS 9.6EPSS 0.22%

Published Apr 22, 2026 · updated Oct 30, 2026

What to do

  1. Upgrade to a fixed version: nimiq-block 1.7.2.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

crates.ionimiq-block

Vulnerable versions
< 1.3.0
Fixed in
1.7.2

Check your project: cargo tree -i nimiq-block

Sources

CWE-20 Improper Input Validation · CWE-190 Integer Overflow or Wraparound · CWE-345 Insufficient Verification of Data Authenticity · CWE-1284 Improper Validation of Specified Quantity in Input

← All critical vulnerabilities