crates.io/negentropy: high 7.5
Remote DoS through unchecked `IdList` allocation in negentropy
Action: Upgrade negentropy to 0.4.4 or later.
cargo update -p negentropy --precise 0.4.4cargo update -p negentropy --precise 0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.4.4 | - |
| 0.5.0 | 0.5.2 | - |
Fixed versions
| 0.4.4 | 0.5.2 |
Sources
- osv: RUSTSEC-2026-0365
- https://crates.io/crates/negentropy
- https://rustsec.org/advisories/RUSTSEC-2026-0365.html
- https://github.com/nostrdevkit/negentropy/pull/14
- https://github.com/nostrdevkit/negentropy/commit/40f7290cbc5755a5ba3190279fbc848a97866280
- https://github.com/nostrdevkit/negentropy/commit/894a32c0ab9f3efd750b3cf06caee27b3f9c3f12
published · modified · JSON