Skip to content
OpenAdvisories

Vendor

tw93

2 known vulnerabilities.

Products

Pake 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-96454

    Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

    Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/defau…

    tw93 Pake
  • High 8.8
    CVE-2026-82635

    Pake arbitrary file write via unsanitized download_file filename

    Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences (for example ../Library/LaunchAgents/com.evil.plist) or an a…

    tw93 Pake