VYPR

chirpstack-sqlite

by ChirpStack

CVEs (1)

  • CVE-2026-71282MedAug 5, 2026
    risk 0.42cvss 6.5epss 0.00

    ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro , while only the tag VALUE is safely parameter-bound via Diesel's…