RUSTSEC-2026-0365 Remote DoS through unchecked `IdList` allocation in negentropy

Summary The negentropy crate is vulnerable to denial-of-service through an unchecked, peer-controlled ID count in reconciliation messages. With the std feature enabled, which is the default configuration, a small malformed message can trigger an enormous memory allocation and terminate the...