A security update is available for anyone using `negentropy` by NostrDevKit.
Please update to v0.4.4 or v0.5.2
https://github.com/nostrdevkit/negentropy/security/advisories/GHSA-jcg8-qg98-373g
Thanks to Alex Gleason (nprofile…g58a) for finding and fixing the vulnerability.
#nostrdevkit #rustnostr #rust
Yuki Kishimoto
npub1dr…eseet
2026-10-17 06:52:22 UTC
Author Public Key
npub1drvpzev3syqt0kjrls50050uzf25gehpz9vgdw08hvex7e0vgfeq0eseetPublished at
2026-10-17 06:52:22 UTCEvent JSON
{
"id": "0000002125d997526693697e3db97d9a7693fc21a6e005fdeeb5a78be337ef33",
"pubkey": "68d81165918100b7da43fc28f7d1fc12554466e1115886b9e7bb326f65ec4272",
"created_at": 1792219942,
"kind": 1,
"tags": [
[
"p",
"0461fcbecc4c3374439932d6b8f11269ccdb7cc973ad7a50ae362db135a474dd",
"wss://relay.ditto.pub/"
],
[
"t",
"nostrdevkit"
],
[
"t",
"rustnostr"
],
[
"t",
"rust"
],
[
"r",
"https://github.com/nostrdevkit/negentropy/security/advisories/GHSA-jcg8-qg98-373g"
],
[
"nonce",
"200Ock",
"24"
]
],
"content": "A security update is available for anyone using `negentropy` by NostrDevKit.\n\nPlease update to v0.4.4 or v0.5.2\n\nhttps://github.com/nostrdevkit/negentropy/security/advisories/GHSA-jcg8-qg98-373g\n\nThanks to nostr:nprofile1qqsqgc0uhmxycvm5gwvn944c7yfxnnxm0nyh8tt62zhrvtd3xkj8fhgpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7qgcwaehxw309aex2mrp0yhxgun9v9kkjarg9e6x7tcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcadg58a for finding and fixing the vulnerability.\n\n#nostrdevkit #rustnostr #rust",
"sig": "335a3ba080dab881ff77158becb9e8db4435a1b0fe2203f615ac31163f9023d1bf8588397e2bc0fbac1561ccde75bac969bd00a6d8e226c39206dcb76f79fbda"
}