rust-iot-platform vulnerabilities
CVEs whose affected-version data names the rust-iot-platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-82453High· 7.5rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model
rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts.
▾ Twilightiot-ecology · rust-iot-platformEPSS 0.47%via NVD
CVE-2026-82452Critical· 9.8rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, an…
▾ Midnightiot-ecology · rust-iot-platformEPSS 0.83%via NVD