{
"id": "fastapi-plaintext-password",
"language": "python",
"group": "security",
"listingTitle": "Review plaintext password",
"title": "Review plaintext password",
"mvvm": false,
"defaultSeverity": "info",
"legacyGroup": "security",
"why": "Persisting a request password directly exposes credentials if storage is compromised.",
"suggestion": "Hash passwords with the established password hasher before persistence.",
"version": 1,
"semanticMaturity": "project",
"securityKind": "hotspot",
"taxonomy": [
"security"
],
"requirements": [
"sourceText"
],
"packs": [
"fastapi"
],
"implementation": "src/rules/frameworks/fastapi.rs",
"languages": [
"python"
],
"frameworks": [
"fastapi"
],
"languageVersions": [],
"limitations": [
"Only explicit FastAPI decorators, common middleware, SQLAlchemy, JWT, and dependency patterns are resolved.",
"Framework wrappers, generated routes, runtime registrations, and external infrastructure cannot be resolved."
]
}