128 matches found
bitchat
bitchat A decentralized peer-to-peer messaging app with dual transport architecture: local Bluetooth mesh networks for offline communication and internet-based Nostr protocol for global reach. No accounts, no phone numbers, no central servers. It's the side-groupchat. bitchat.free š² App Store...
feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)
yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...
music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)
yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...
nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.11.4)
yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...
RUSTSEC-2026-0243 `nostr-relay-pool` is unmaintained
The nostr-relay-pool crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
RUSTSEC-2026-0241 `nostr-keyring` is unmaintained
The nostr-keyring crate is no longer actively maintained...
RUSTSEC-2026-0237 `nostr-relay-builder` is unmaintained
The nostr-relay-builder crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
`nostr-keyring` is unmaintained
The nostr-keyring crate is no longer actively maintained...
`nostr-relay-builder` is unmaintained
The nostr-relay-builder crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
`nostr-relay-pool` is unmaintained
The nostr-relay-pool crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
PT-2026-76523
The nostr-relay-pool crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
PT-2026-76517
The nostr-relay-builder crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0. Users should migrate to nostr-sdk...
PT-2026-76521
The nostr-keyring crate is no longer actively maintained...
nostr-sdk-sqlite (>=0.19.0, <=0.21.0) potentially affected by unknown CVE via nostr (>=0.19.5, <=0.21.0)
nostr CARGO version =0.19.5, =0.19.0, =0.21.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0228...
nostr-sdk-sqlite (>=0.19.0, <=0.21.0) potentially affected by unknown CVE via nostr (>=0.19.5, <=0.21.0)
nostr CARGO version =0.19.5, =0.19.0, =0.21.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0226...
nostr-sdk-sqlite (>=0.19.0, <=0.21.0) potentially affected by unknown CVE via nostr (>=0.19.5, <=0.21.0)
nostr CARGO version =0.19.5, =0.19.0, =0.21.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0227...
nostr-sdk-sqlite (>=0.19.0, <=0.21.0) potentially affected by unknown CVE via nostr (>=0.19.5, <=0.21.0)
nostr CARGO version =0.19.5, =0.19.0, =0.21.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0229...
RUSTSEC-2026-0224 Verification cache poisoning allows forged Nostr events to bypass signature validation
The nostr-relay-pool crate cached the result of event signature verification before the check was actually performed. Because the entry was inserted unconditionally, a first delivery whose signature failed was still recorded in the cache. A subsequent delivery of the same event identical ID, but...