Skip to content
OpenAdvisories

Vendor

Tauri

5 known vulnerabilities.

Products

tauri-plugin-updater 2 tauri 1 tauri-plugin-dialog 1 tauri-plugin-http 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-95627

    Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

    When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-lo…

    Tauri tauri-plugin-dialog
  • High 8.3
    CVE-2026-95626

    Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains

    Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources rem…

    Tauri tauri