nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-34067 · Microsoft / collected KEV context

EUVD-2026-25084

GHSA-264v-m8fm-76jm

cve-program · CVE-2026-34067

• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm
• https://github.com/nimiq/core-rs-albatross/pull/3659
• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0

euvd · EUVD-2026-25084

• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm
• https://github.com/nimiq/core-rs-albatross/pull/3659
• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0

nvd · CVE-2026-34067

• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a
• https://github.com/nimiq/core-rs-albatross/pull/3659
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0
• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm

osv · GHSA-264v-m8fm-76jm

• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm
• https://nvd.nist.gov/vuln/detail/CVE-2026-34067
• https://github.com/nimiq/core-rs-albatross/pull/3659
• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a
• https://github.com/nimiq/core-rs-albatross
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0

No related operational record is retained in the current change model.