Known Vulnerabilities for Tauri by Tauri
Listed below are 7 of the newest known vulnerabilities associated with "Tauri" by "Tauri".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96455 json | The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/r... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96454 json | Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-95627 json | When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can forc... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-95626 json | Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protectio... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-95625 json | The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary byt... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-95624 json | The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-95623 json | The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-82642 json | Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOM... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82635 json | Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads direc... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-55642 json | dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs... | Not Provided | 2026-08-20 | 2026-08-20 |