Skip to content
OpenAdvisories

Product · wailsapp

wails

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-34157 Public exploit

    Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

    Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsAllowedOrigins in v2/internal/frontend/originvalidator/originValidator.go passes wildcard patterns to wildcardPatternToRegex, which expands …

    wailsapp wails github.com/wailsapp/wails/v2 Go