VYPR

chirpstack-sqlite

by ChirpStack

CVEs (1)

  • CVE-2026-71282Aug 5, 2026
    risk 0.00cvss epss

    ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count() and list()) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format!() macro (`dsl::sql::(&format!("device.tags->>'{}' =",…