{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.0"}],"component":"nimiq-transaction","cve_ids":["CVE-2026-34067"],"ecosystem":"crates.io","epss":0.00318,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-264v-m8fm-76jm","id":"tcs_01M5KER0S9K4HNDBPK74FJ5BYQ","modified_at":"2026-05-05T15:59:34.424080Z","published_at":"2026-04-22T19:20:50Z","references":["https://osv.dev/vulnerability/GHSA-264v-m8fm-76jm","https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm","https://nvd.nist.gov/vuln/detail/CVE-2026-34067","https://github.com/nimiq/core-rs-albatross/pull/3659","https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a","https://github.com/nimiq/core-rs-albatross","https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-264v-m8fm-76jm","url":"https://osv.dev/vulnerability/GHSA-264v-m8fm-76jm"}],"summary":"nimiq-transaction: Panic via `HistoryTreeProof` length mismatch"}