-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0252
============================================================

Advisory-ID:  0xCERT-2026-0252
Severity:     Medium
Published:    2026-10-16T16:26:20.000Z
Updated:      2026-10-16T17:07:19.063Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0252

Title: Nethermind 2.2.0: security release for Ethereum node operators

Summary
- -------
Nethermind 2.2.0 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Nethermind should review and upgrade.

Details
- -------
Summary
Nethermind 2.2.0 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Nethermind should review and upgrade.

Affected
- - Nethermind (NethermindEth/nethermind) versions before 2.2.0

From the release notes
acceptance is serialised; rejected peer candidates back off. (#14381, #14190)
## Stability & hardening
- - .NET libraries updated to the October 2026 servicing release, which carries Microsoft's security fixes (.NET 10.0.13 CVE list) (#14628):
- - 10.0.12 → 10.0.13: Microsoft.AspNetCore.DataProtection, Microsoft.AspNetCore.DataProtection.Extensions, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.FileProviders.Embedded, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.ObjectPool, System.Configuration.ConfigurationManager, System.IO.Hashing, System.Security.Cryptography.ProtectedData
- - 2.0.12 → 2.0.13: System.CommandLine
- - 10.0.401 → 10.0.402 (build-time only): Microsoft.Build.Tasks.Git, Microsoft.SourceLink.GitHub
- - Nethermind.RocksDbBindings updated to the stable 11.8.1.153. (

Recommended actions
- - Upgrade Nethermind to 2.2.0 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Nethermind 2.2.0 release notes: https://github.com/NethermindEth/nethermind/releases/tag/2.2.0. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/NethermindEth/nethermind/releases/tag/2.2.0

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrStdUJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmfvQYcbZiP36a/r1clXFKLpI5NM9q6R2YzWyDTs
dmJk2xYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAADqIQD/XtOOwBulTeRlYvk6
MHhVRrRqbJqt4BU1eM4AU8hnS/UBAOFlJsfuHvNqUSNJaZdm3LiDAC9pn6yv
2c4VJcJDBOgI
=pTUM
-----END PGP SIGNATURE-----