Skip to content
OpenAdvisories

Vendor

tauri-apps

9 known vulnerabilities.

Products

tauri 8 plugins-workspace 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2023-46115

    Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli

    Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key passw…

    tauri-apps tauri @tauri-apps/cli tauri-cli npm crates.io
  • High 8.3
    CVE-2022-39215

    The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri

    Tauri is a framework for building binaries for all major desktop platforms. Due to missing canonicalization when `readDir` is called recursively, it was possible to display directory listings outside of the defined `fs` scope. This required a crafted symbolic…

    tauri-apps tauri tauri crates.io