CVE-2026-34065: nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals

Executive brief

### Impact An untrusted p2p peer can cause a node to panic by announcing an election macro block whose `validators` set contains an invalid compressed BLS voting key.

Hashing an election macro header hashes `validators` and reaches `Validators::voting_keys()`, which calls `validator.voting_key.uncompress().unwrap()` and panics on invalid bytes.

### Patches [The patch for this vulnerability](https://github.com/nimiq/core-rs-albatross/commit/e10eaebcd7774e5da6d0ff5e88ed13503474f0ff) is included as part of [v1.3.0](https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0).

### Workarounds No known workarounds.

Affected products

• crates.io nimiq-primitives

References

• https://api.github.com/users/1seal
• https://github.com/1seal
• https://api.github.com/users/1seal/gists%7B/gist_id%7D
• https://api.github.com/users/1seal/repos
• https://avatars.githubusercontent.com/u/239602944?v=4
• https://api.github.com/users/1seal/events%7B/privacy%7D