Rust advisories / crate
Security history · nostr · data from Oct 24, 2026
Is nostr safe to use? Its security history
VerdictNo open advisories. 8 past vulnerabilities were fixed; use 0.45.0-alpha.6 or newer to be clear of all of them.
8advisories on record
8vulnerabilities
0unmaintained notices
0.45.0-alpha.6newest fixed version
Every advisory, newest first
- Vulnerability MediumRUSTSEC-2026-0225 · 2026-08-01Debug output exposes NIP-46 and NIP-60 credentials
- Vulnerability HighRUSTSEC-2026-0226 · 2026-08-01Wallet event parsers accept unauthenticated events
- Vulnerability HighRUSTSEC-2026-0227 · 2026-08-01NIP-44 v2 decryption permits resource exhaustion
- Vulnerability MediumRUSTSEC-2026-0228 · 2026-08-01NIP-04 parsing amplifies malformed ciphertext memory use
- Vulnerability HighRUSTSEC-2026-0229 · 2026-08-01NIP-98 authorization parsing permits resource exhaustion
- Vulnerability HighRUSTSEC-2026-0230 · 2026-08-01Empty NIP-50 search filters can panic
- Vulnerability HighRUSTSEC-2026-0219 · 2026-07-26Remote Denial of Service via malformed NIP-04 IV
- Vulnerability HighRUSTSEC-2026-0216 · 2026-07-25Remote Denial of Service via malformed NIP‑44 v2 payload
Check your version
Run cargo tree -i nostr to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?