Tauri / Tauri
9 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-95626 | Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains | HIGH | 8.3 | Sep 23, 2026 |
| CVE-2026-42184 | Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands | MEDIUM | 6.1 | May 27, 2026 |
| CVE-2024-35222 | iFrames Bypass Origin Checks for Tauri API Access Control | MEDIUM | 5.9 | May 23, 2024 |
| CVE-2023-46115 | Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli | HIGH | 8.4 | Oct 19, 2023 |
| CVE-2023-34460 | Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles | CRITICAL | 9.8 | Jun 23, 2023 |
| CVE-2023-31134 | Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites | MEDIUM | 5.4 | May 9, 2023 |
| CVE-2022-46171 | Tauri vulnerable to path traversal | HIGH | 7.7 | Dec 23, 2022 |
| CVE-2022-41874 | Tauri Filesystem Scope can be Partially Bypassed | MEDIUM | 4.7 | Nov 10, 2022 |
| CVE-2022-39215 | The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri | HIGH | 8.3 | Sep 15, 2022 |
Showing 1 to 9 of 9 CVEs