CVE Intelligence

Vulnerabilidades do Chirpstack Chirpstack

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Chirpstack Chirpstack: 1 registro(s), com versões afetadas e correções.

CVE-2026-71282 Média · 6.5 CWE-89 05/08/2026
ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter
ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro , while only the tag VALUE is safely parameter-bound via Diesel's .bind.