GHSA-c978-wq47-pvvw
Low · 3.8CVSS
3.8
EPSS
—
Published
Nov 12, 2025
CISA due date
—
The record
sudo-rs: Partial password reveal is possible after timeout
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | sudo-rs | 0.2.7 | 0.2.10 |
| cargo | sudo-rs | 0.2.7 | 0.2.10 |
Related vulnerabilities
- CVE-2025-64170 sudo-rs is a memory safe implementation of sudo and su written in Rust. Same vulnerability
- GHSA-q428-6v73-fc4q sudo-rs doesn't record authenticating user properly in timestamp Also affects sudo-rs
- CVE-2025-64517 sudo-rs is a memory safe implementation of sudo and su written in Rust. Also affects sudo-rs
- CVE-2026-3314 Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops… CWE-549
- CVE-2025-13175 Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an… CWE-549
- CVE-2025-42904 Due to an Information Disclosure vulnerability in Application Server ABAP, an… CWE-549