Lucene search
+L

1 matches found

RustSec
RustSec
added 2026/08/01 12:00 p.m.12 views

NIP-44 v2 decryption permits resource exhaustion

The NIP-44 decryption entry point Base64-decoded the complete attacker-controlled payload before determining its version or enforcing any size limit. For v2 payloads, the decoded buffer was then authenticated with HMAC even when it was much larger than the maximum payload supported by the crate's...

5.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder