docs: add security caveat and @DarkNavyOrg thanks to changelog
What the developer wrote
Authored by Jon Griffiths
docs: add security caveat and @DarkNavyOrg thanks to changelog
What changed, and why it matters
This commit only edits the project's changelog. It adds a note saying version 1.0.38 contains important security updates and thanks an outside security research group called DARKNAVY. The actual code fixes are not shown in this commit, so we cannot evaluate what the security problem is or how serious it is from the diff alone.
Treat the associated release (1.0.38) as security-relevant and upgrade as advised by the vendor. For a full assessment, review the actual code changes that implement the security fixes, and consider requesting or monitoring for a security advisory from Blockstream or DARKNAVY.
Security signals we found
Vendor explicitly labels the release as containing 'important security updates'
Vendor credits an independent researcher/organization (DARKNAVY / @DarkNavyOrg) for responsible disclosure
No code or patch content is present in the commit to assess the actual vulnerability
Evidence from the diff
The diff is a documentation-only change to CHANGELOG.md. It inserts a release note stating that v1.0.38 includes ‘important security updates’ and credits DARKNAVY (@DarkNavyOrg) for ‘research and responsible disclosure.’ No source code, configuration, or binary changes are present, and the underlying security patches are not included in this commit. The date was also changed from ‘2025-11-26’ to ‘2025-13-26,’ which appears to be a typo (month 13 is invalid).
Changed components
CHANGELOG.md documentation onlyInspect captured patch +5 / −1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8056012..7e88316 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,11 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-## [1.0.38] - 2025-11-26
+## [1.0.38] - 2025-13-26
+
+Note: This release contains important security updates; All users should
+upgrade as soon as possible. The developers would like to thank
+DARKNAVY(@DarkNavyOrg) for their research and responsible disclosure.
### Changed
- Increase QR guide drawing speed for faster scanning.
Why this scored 7/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.