A vulnerability in sudo-rs versions 0.2.7 through 0.2.9 allows partial password input to be revealed on the console if the user delays pressing return until after a password timeout occurs. This can expose partial password information to anyone observing the screen or accessing history files, potentially aiding social engineering or pass-by attacks. The issue is fixed in version 0.2.10.