https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:52:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349668 EUVD-2026-349668 https://cve.radiocsirt.org/vuln/euvd-2026-349668 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71277 <p>rust-iot-platform&#39;s AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header (e.g. ) satisfies the guard, granting access to every endpoint protected only by this request guard.</p> <p>rust-iot-platform&#39;s AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header (e.g. ) satisfies the guard, granting access to every endpoint protected only by this request guard.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71277 https://cve.radiocsirt.org/vuln/ghsa-82xc-gf8p-89h7 <p>rust-iot-platform&#39;s AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header (e.g. `Authorization: fake`) satisfies the guard, granting access to every endpoint protected only by this request guard.</p> <p>rust-iot-platform&#39;s AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header (e.g. `Authorization: fake`) satisfies the guard, granting access to every endpoint protected only by this request guard.</p> https://cve.radiocsirt.org/vuln/ghsa-82xc-gf8p-89h7