Skip to content
OpenAdvisories

Vendor

chirpstack

1 known vulnerabilities.

Products

chirpstack 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-71282

    ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter

    ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro , while only the tag VALUE is safely parameter-bou…

    chirpstack chirpstack