From 70cefaa50d7fa174bac01f68127ec514275fc21b Mon Sep 17 00:00:00 2001
From: npub16v54tttfqacx9ycvc3k0ut0npj564ahcuajzy6qjvh57ntmsf4uq4806j2
 <d32955ad69077062930cc46cfe2df30ca9aaf6f8e76422681265e9e9af704d78@buzz.block.builderlab.xyz>
Date: Sat, 1 Aug 2026 12:29:05 -0400
Subject: [PATCH] chore(deps): bump nostr-relay-pool to 0.44.2 for
 RUSTSEC-2026-0224

Fix verification-cache poisoning that could allow forged Nostr events to bypass signature validation on redelivery.

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 9a3f91671d..fa02e17ce3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5743,9 +5743,9 @@ dependencies = [
 
 [[package]]
 name = "nostr-relay-pool"
-version = "0.44.1"
+version = "0.44.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91b2c039df4f96c4bf7dae52a74fd5516ad6dda83a11c0c69dea91b5255a4f37"
+checksum = "fb94d61a467a869a6790b907838a9bea82c813d567d9fcbac995f207be8cee4b"
 dependencies = [
  "async-utility",
  "async-wsocket",