Executive brief
Wallet event parsers accept unauthenticated events
Affected products
- crates.io nostr
Junglewise Threat Intelligence
RUSTSEC-2026-0226 - Wallet event parsers accept unauthenticated events
Severity: low · CVSS 3.1 · Published 2026-08-01
Technologies: nostr (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2026-0229 - NIP-98 authorization parsing permits resource exhaustion
- RUSTSEC-2026-0230 - Empty NIP-50 search filters can panic
- RUSTSEC-2026-0228 - NIP-04 parsing amplifies malformed ciphertext memory use
- RUSTSEC-2026-0225 - Debug output exposes NIP-46 and NIP-60 credentials
- RUSTSEC-2026-0227 - NIP-44 v2 decryption permits resource exhaustion