Nethermind 2.2.0: security release for Ethereum node operators

Summary

Nethermind 2.2.0 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Nethermind should review and upgrade.

Affected

• Nethermind (NethermindEth/nethermind) versions before 2.2.0

From the release notes

acceptance is serialised; rejected peer candidates back off. (#14381, #14190) ## Stability & hardening - .NET libraries updated to the October 2026 servicing release, which carries Microsoft's security fixes (.NET 10.0.13 CVE list) (#14628): - 10.0.12 → 10.0.13: Microsoft.AspNetCore.DataProtection, Microsoft.AspNetCore.DataProtection.Extensions, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.FileProviders.Embedded, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.ObjectPool, System.Configuration.ConfigurationManager, System.IO.Hashing, System.Security.Cryptography.ProtectedData - 2.0.12 → 2.0.13: System.CommandLine - 10.0.401 → 10.0.402 (build-time only): Microsoft.Build.Tasks.Git, Microsoft.SourceLink.GitHub - Nethermind.RocksDbBindings updated to the stable 11.8.1.153. (

Recommended actions

• Upgrade Nethermind to 2.2.0 or later
• Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution

This 0xCERT advisory relays the Nethermind 2.2.0 release notes: https://github.com/NethermindEth/nethermind/releases/tag/2.2.0. Refer to the upstream project for the authoritative record and any follow-up security advisories.