CVE-2024-41962

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

EUVD-2024-2502

Malicious code in bioql PyPI...

Improper Authorization

bostr is vulnerable to Improper Authorization.The vulnerability is due improper validation which lets any user access the api even when the authorizedkeys and noscraper is set to true. Attackers can exploit this by gaining access to the relay without proper authorization...

Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

GHSA-5CF7-CXRF-MQ73 Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

CVE-2024-41962

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2024-41962 Bostr Improper Authorization

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2024-41962

Bostr (nostr relay aggregator proxy) is affected by an Improper Authorization vulnerability prior to version 3.0.10. When noscraper is enabled, the system lets anyone in even if authorized_keys are set, effectively bypassing access controls. The issue is fixed in 3.0.10. Connected sources also de...

CVE-2024-41962 Bostr Improper Authorization

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2024-41962

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2024-41962 Bostr Improper Authorization

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2024-41962: Improper Authorization

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

PT-2024-29665

Name of the Vulnerable Software and Affected Versions Bostr versions prior to 3.0.10 Description The issue allows unauthorized access to a private bouncer, even when authorized keys are set, if noscraper is enabled. This means that anyone can use the bouncer, regardless of whether their pubkey is...

Bostr 安全漏洞

Bostr is a relay aggregator agent by the individual developer Yonle. A security vulnerability exists in versions prior to Bostr 3.0.10, which stems from a vulnerability that would allow anyone to use noscper if it is enabled...