Skip to content
Tauri vulnerabilities
Newest
-
tauri tauri-plugin-dialog
Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion
CVE-2026-95627
7.7 High
-
tauri
Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains
CVE-2026-95626
8.3 High
-
tauri tauri-plugin-updater
Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade
CVE-2026-95625
5.9 Medium
-
tauri tauri-plugin-updater
Tauri framework v2 malicious downgrade via allow_downgrades from frontend code
CVE-2026-95624
6.8 Medium
-
tauri tauri-plugin-http
Tauri framework v2 SSRF Protection Bypass via HTTP Redirects
CVE-2026-95623
5.6 Medium
-
tauri
Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands
CVE-2026-42184
Fix available
6.1 Medium
-
tauri plugin-shell, tauri-apps plugins-workspace +1 more
Improper Scope Validation in the open Endpoint of tauri-plugin-shell
CVE-2025-31477
Fix available
9.3 Critical
-
tauri
iFrames Bypass Origin Checks for Tauri API Access Control
CVE-2024-35222
Fix available
5.9 Medium
-
tauri
Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli
CVE-2023-46115
Fix available
8.4 High
-
tauri
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
CVE-2023-34460
Fix available
4.8 Medium
-
tauri
Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
CVE-2023-31134
Fix available
4.8 Medium
-
tauri
Tauri vulnerable to path traversal
CVE-2022-46171
Fix available
6.8 Medium
-
tauri
Tauri Filesystem Scope can be Partially Bypassed
CVE-2022-41874
Fix available
2.6 Low
-
tauri
The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri
CVE-2022-39215
Fix available
8.3 High