{"action":"Upgrade nostr to 0.44.5 or later.","affected":[{"fixed":"0.44.5","introduced":"0.0.0-0"},{"fixed":"0.45.0-alpha.5","introduced":"0.45.0-alpha.1"}],"component":"nostr","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.44.5","0.45.0-alpha.5"],"ghsa_id":"GHSA-hrqp-8w79-gwgw","id":"tcs_01M5KFBVVM9DTJYG5QGH0NZBPX","modified_at":"2026-08-01T11:45:04.391536905Z","published_at":"2026-07-25T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0216","https://crates.io/crates/nostr","https://rustsec.org/advisories/RUSTSEC-2026-0216.html","https://github.com/nostrdevkit/nostr/commit/73bdd677b872641d57a2ebcc5afc23ee0e5f0d2d"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0216","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0216"}],"summary":"Remote Denial of Service via malformed NIP‑44 v2 payload"}