crates.io/nostr-relay-pool: high 7.5
Verification cache poisoning allows forged Nostr events to bypass signature validation
Action: Upgrade nostr-relay-pool to 0.44.2 or later.
cargo update -p nostr-relay-pool --precise 0.44.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.44.2 | - |
Fixed versions
| 0.44.2 |
Sources
- osv: RUSTSEC-2026-0224
- https://crates.io/crates/nostr-relay-pool
- https://rustsec.org/advisories/RUSTSEC-2026-0224.html
- https://github.com/nostrdevkit/nostr/commit/02a88bd5688de058bfba8aa9fb4612441a384eff
published · modified · JSON