My understanding is the bug was introduced in 4.0.0

Raw JSON

{
  "kind": 1,
  "id": "262d0ef84ae6f887522a2e71fe9f03ae36dae4cab027f821acdad2a4bbb6fbca",
  "pubkey": "0d97beae567fcec9c6574f1c6ef6126ea969d4992c3198e51c0fac52c5274a14",
  "created_at": 1785953848,
  "tags": [
    [
      "e",
      "4c895716dc8e777013814b8159576ac290e9611650e8eaa79298e2cc83948b90",
      "wss://nostr.oxtr.dev/",
      "root",
      "edb470271297ac5a61f277f3cd14de54c67eb5ccd20ef0d9df29be18685bb004"
    ],
    [
      "e",
      "c49feb764981bbaea24f32a08325eaad7b77ebc3ecdcabbea162ae0b69d58df1",
      "wss://nostr.oxtr.dev/",
      "",
      "9a7234c7cdd7c2c34c48857060a09879af1a2141cbda317b33ad5cc1d1a414ef"
    ],
    [
      "e",
      "719549b7dbfebd91d2c72b96d2979d11bddc9fbdc350e3ebeb90f7fc06702253",
      "wss://filter.nostr.wine/",
      "reply",
      "0f9257b1472753c3c58c6842162c841418a0da1030b326c4bdab26315198bee0"
    ],
    [
      "p",
      "edb470271297ac5a61f277f3cd14de54c67eb5ccd20ef0d9df29be18685bb004",
      "ws://d4kmllyadike6wbekmdus4ddswmaqfqpiznpownz4zwabhf3lrhpm7qd.onion/"
    ],
    [
      "p",
      "9a7234c7cdd7c2c34c48857060a09879af1a2141cbda317b33ad5cc1d1a414ef",
      "wss://eden.nostr.land/"
    ],
    [
      "p",
      "04c915daefee38317fa734444acee390a8269fe5810b2241e5e6dd343dfbecc9",
      "wss://nos.lol/"
    ],
    [
      "p",
      "1afe0c74e3d7784eba93a5e3fa554a6eeb01928d12739ae8ba4832786808e36d",
      "wss://premium.primal.net/"
    ],
    [
      "p",
      "0f9257b1472753c3c58c6842162c841418a0da1030b326c4bdab26315198bee0",
      "wss://nos.lol/"
    ],
    [
      "client",
      "Amethyst"
    ]
  ],
  "content": "My understanding is the bug was introduced in 4.0.0\n\nThe confusion comes from the fact that since they patched a bug in that version, they removed it from the list of releases instead of keeping it and adding a \"THIS IS A VULNERABLE VERSION\" disclaimer.\n\nTherefore people see that the first version released after 3.x.x was 4.0.1 and assume that this was where the bug was introduced.",
  "sig": "317a0bd029bade09197d003bc413d254a86b45c6842e7991117c36a968e6679077577d31c87639e7ebf3f6eae15b737d8df0b95a0a12e6271e0f110aa4121a91"
}