Executive brief
Remote Denial of Service via malformed NIP-04 IV
Affected products
- crates.io nostr
Junglewise Threat Intelligence
RUSTSEC-2026-0219 - Remote Denial of Service via malformed NIP-04 IV
Severity: low · CVSS 3.1 · Published 2026-07-26
Technologies: nostr (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2026-0229 - NIP-98 authorization parsing permits resource exhaustion
- RUSTSEC-2026-0230 - Empty NIP-50 search filters can panic
- RUSTSEC-2026-0228 - NIP-04 parsing amplifies malformed ciphertext memory use
- RUSTSEC-2026-0225 - Debug output exposes NIP-46 and NIP-60 credentials
- RUSTSEC-2026-0227 - NIP-44 v2 decryption permits resource exhaustion