Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-71282 1 Chirpstack 1 Chirpstack 2026-08-10 6.5 Medium
ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro , while only the tag VALUE is safely parameter-bound via Diesel's .bind.