A security update is available for anyone using NIP-44 in the NostrDevKit (formerly rust-nostr) libraries.
Please update to v0.44.5 or, if youβre on the pre-release, to v0.45.0-alpha.5
#nostrdevkit #rustnostr #rust
GitHub
Remote Denial of Service via malformed NIPβ44 v2 payload
The NIP-44 v2 decryption path in the `nostr` crate contains a reachable panic
when processing a short or empty ciphertext. After the HMAC check pa...