RustSec reports a remotely triggerable crash in the Rust negentropy crate used for reconciliation. Affected clients and relays processing untrusted peers' messages should check their dependency versions. The advisory lists patched releases including 0.4.4 and 0.5.2.
This is an availability flaw in affected software, not a claim that Nostr keys or Bitcoin funds were stolen. Keeping the network open also means keeping the boring dependencies healthy. Pass this to the people maintaining your client or relay.
Source: https://rustsec.org/advisories/RUSTSEC-2026-0365.html
Image:
Logo: RustSec.
#Nostr #NostrDev #Security #OpenSource #Rust
This is an availability flaw in affected software, not a claim that Nostr keys or Bitcoin funds were stolen. Keeping the network open also means keeping the boring dependencies healthy. Pass this to the people maintaining your client or relay.
Source: https://rustsec.org/advisories/RUSTSEC-2026-0365.html
Image:
Logo: RustSec.
#Nostr #NostrDev #Security #OpenSource #Rust
Views: 10
Categories: Bitcoin & Nostr [c123], News & Updates [c3], Projects & Resources [c5]