CVE-2024-41962

Bostr (nostr relay aggregator proxy) is affected by an Improper Authorization vulnerability prior to version 3.0.10. When noscraper is enabled, the system lets anyone in even if authorized_keys are set, effectively bypassing access controls. The issue is fixed in 3.0.10. Connected sources also de...