THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-3763-qp59-59vf (high) — nimiq-blockchain: Validity store off by one error

[GHSA] GHSA-3763-qp59-59vf (high) — nimiq-blockchain: Validity store off by one error

medgithub_advisoriesPublished 2026-08-12

GHSA-3763-qp59-59vf Severity: high CVE: CVE-2026-46369

nimiq-blockchain: Validity store off by one error

### Impact The validity store treats a transaction with stored `block_number = X` as "in window" only when `X > last_bn - transaction_validity_window_blocks` (strict inequality). However the protocol's `Transaction::is_valid_at` accepts a transaction for inclusion in any block in `[validity_s

Indicators of compromise

CVE-2026-46369cve

Original source: https://github.com/advisories/GHSA-3763-qp59-59vf