Intel

AIKIDO-2026-992237

nostr-relay-pool is vulnerable to Use of Unmaintained Third Party Components

Use of Unmaintained Third Party Components Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 12, 2026

50

Medium Risk

This Affects:

Are you affected? Scan for Free

TL;DR

The nostr-relay-pool crate is no longer actively maintained as a standalone crate. Its functionality has been incorporated into nostr-sdk starting with version 0.45.0.

Who does this affect?

You are affected if you are using this package.

Background info

nostr-relay-pool is vulnerable to Use of Unmaintained Third Party Components in all versions.

How to fix this

Remove any nostr-relay-pool package from your application. Users should migrate to nostr-sdk starting from v0.45.0.