crates.io/nostr

Remote Denial of Service via malformed NIP‑44 v2 payload

Modified: 8/1/2026

Remote Denial of Service via malformed NIP-04 IV

Modified: 8/1/2026

Debug output exposes NIP-46 and NIP-60 credentials

Modified: 8/2/2026

Wallet event parsers accept unauthenticated events

Modified: 8/2/2026

NIP-44 v2 decryption permits resource exhaustion

Modified: 8/2/2026

NIP-04 parsing amplifies malformed ciphertext memory use

Modified: 8/2/2026

NIP-98 authorization parsing permits resource exhaustion

Modified: 8/2/2026

Empty NIP-50 search filters can panic

Modified: 8/2/2026