Geek on Nostr: Hanami 0.13.1 is out and is a mandatory security upgrade that adds key verification ...
Hanami 0.13.1 is out and is a mandatory security upgrade that adds key verification for users logging in via bunker URI.
This fixes an issue where Hanami trusted a signer held a key which could have led to user impersonation in multi-user instances (single-user mitigated by pubkey gating). Drives and private files are encrypted so their contents would never have been visible in the rare chance anyone was affected. Regardless, there's a security advisory in the repo with further details.
https://github.com/Letdown2491/hanami/releases/tag/v0.13.1Published at
2026-08-01 01:26:52 UTCEvent JSON
{
"id": "73b2094fe0d7ea072d4821e1264fa3605b016dcf13f4722f219bdd4f0aeeeb81",
"pubkey": "daa41bedb68591363bf4407f687cb9789cc543ed024bb77c22d2c84d88f54153",
"created_at": 1785547612,
"kind": 1,
"tags": [],
"content": "Hanami 0.13.1 is out and is a mandatory security upgrade that adds key verification for users logging in via bunker URI. \r\n\r\nThis fixes an issue where Hanami trusted a signer held a key which could have led to user impersonation in multi-user instances (single-user mitigated by pubkey gating). Drives and private files are encrypted so their contents would never have been visible in the rare chance anyone was affected. Regardless, there's a security advisory in the repo with further details.\r\n\r\nhttps://github.com/Letdown2491/hanami/releases/tag/v0.13.1",
"sig": "c79e153c0c81b6b81e83ccda1506ae9d46c36dd55d3699cd6c4c3a79b1bc7a7845e5632f683895068a41d032237ad81e3e9c98bb7612ea2ac641ad36a6f58f43"
}
