Skip to content
OpenAdvisories

Product · Tauri

tauri-plugin-http

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-95623

    Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

    The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally without re-checking the n…

    Tauri tauri-plugin-http