Tauri Tauri-plugin-updater vulnerabilities

• tauri tauri-plugin-updater Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade CVE-2026-95625 5.9 MediumSeptember 23, 2026
• tauri tauri-plugin-updater Tauri framework v2 malicious downgrade via allow_downgrades from frontend code CVE-2026-95624 6.8 MediumSeptember 22, 2026