VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Aug 1, 2024· Updated Jun 17, 2026

CVE-2024-41962

CVE-2024-41962

Description

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorized_keys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
bostrnpm
< 3.0.103.0.10

Affected products

3
  • Yonle/Bostr2 versions
    cpe:2.3:a:yonle:bostr:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:yonle:bostr:*:*:*:*:*:*:*:*range: <3.0.10
    • (no CPE)range: < 3.0.10
  • ghsa-coords
    pkg:npm/bostr
    Range: < 3.0.10

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.