Tauri-apps vulnerabilities

Products

• Tauri 9

Newest

• tauri Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains CVE-2026-95626 8.3 HighSeptember 23, 2026
• tauri Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands CVE-2026-42184 Fix available 6.1 MediumMay 6, 2026
• tauri plugin-shell, tauri-apps plugins-workspace +1 more Improper Scope Validation in the open Endpoint of tauri-plugin-shell CVE-2025-31477 Fix available 9.3 CriticalApril 2, 2025
• tauri iFrames Bypass Origin Checks for Tauri API Access Control CVE-2024-35222 Fix available 5.9 MediumMay 23, 2024
• tauri Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli CVE-2023-46115 Fix available 8.4 HighOctober 19, 2023
• tauri Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles CVE-2023-34460 Fix available 4.8 MediumJune 21, 2023
• tauri Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites CVE-2023-31134 Fix available 4.8 MediumMay 3, 2023
• tauri Tauri vulnerable to path traversal CVE-2022-46171 Fix available 6.8 MediumDecember 22, 2022
• tauri Tauri Filesystem Scope can be Partially Bypassed CVE-2022-41874 Fix available 2.6 LowSeptember 19, 2022
• tauri The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri CVE-2022-39215 Fix available 8.3 HighAugust 7, 2022