{"action":"Upgrade nimiq-block to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"0"}],"component":"nimiq-block","cve_ids":["CVE-2026-33471"],"ecosystem":"crates.io","epss":0.00217,"exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-6973-8887-87ff","id":"tcs_01M5KETKW6T3R2PEF916HFDNRB","modified_at":"2026-10-30T15:45:11.536013768Z","published_at":"2026-04-22T19:13:47Z","references":["https://osv.dev/vulnerability/GHSA-6973-8887-87ff","https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-6973-8887-87ff","https://nvd.nist.gov/vuln/detail/CVE-2026-33471","https://github.com/nimiq/core-rs-albatross/pull/3657","https://github.com/nimiq/core-rs-albatross/commit/d02059053181ed8ddad6b59a0adfd661ef5cd823","https://github.com/nimiq/core-rs-albatross","https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-6973-8887-87ff","url":"https://osv.dev/vulnerability/GHSA-6973-8887-87ff"}],"summary":"nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation"}