-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0301
============================================================

Advisory-ID:  0xCERT-2026-0301
Severity:     Medium
Published:    2026-10-26T16:59:00.000Z
Updated:      2026-11-02T12:44:07.918Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0301

Title: Nethermind 2.2.2 ships the October 2026 out-of-band .NET security updates for Ethereum node operators

Summary
- -------
Nethermind 2.2.2 is a patch release on top of 2.2.1 that includes the October 2026 out-of-band .NET security updates (Docker image based on .NET 10.0.14). It has no code, database or config changes and can be installed in place over any 2.2.x version.

Details
- -------
Summary
Nethermind 2.2.2 (released 2026-10-26) is a patch release on top of 2.2.1 that includes the October 2026 out-of-band .NET security updates. The release notes name no specific CVEs and refer to Microsoft's announcement for details of the fixed vulnerabilities.

Affected
- - Nethermind (NethermindEth/nethermind) 2.2.x before 2.2.2 built on earlier .NET runtimes
- - Fixed in 2.2.2 (Docker image based on .NET 10.0.14)

Impact
The fixed issues are in the .NET runtime, not in Nethermind code; the release notes do not describe impact on Nethermind or exploitation in the wild. Consensus behaviour and fork schedules are unchanged from 2.2.1.

Recommended actions
- - Upgrade in place to Nethermind 2.2.2 from any 2.2.x version (Docker: pull the new image tag)
- - If running a self-managed .NET runtime, apply Microsoft's October 2026 out-of-band .NET updates

Source & attribution
This 0xCERT advisory relays the Nethermind 2.2.2 release notes: https://github.com/NethermindEth/nethermind/releases/tag/2.2.2. Details may change; refer to the upstream project and Microsoft's advisory for the authoritative record.

References
- ----------
- - https://github.com/NethermindEth/nethermind/releases/tag/2.2.2

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrtEbQJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmdgeVQGeR3tNzCEBBxvrB9LbihbAnHxOXsTt6zb
LqujpRYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAADdeAEAljEkcJRtDnZKlQfa
MVKZheLD0zb1XQWWjGOMRMxH5rYA/2Eo+fczTYygeNUmxvv/P+UfAGirhX39
ZGPcH3Hr8F8P
=cmah
-----END PGP SIGNATURE-----