Tauri tauri-plugin-updater

• CVE-2026-95625 Medium 5.9 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade 0.2%
• CVE-2026-95624 Medium 6.8 Tauri framework v2 malicious downgrade via allow_downgrades from frontend code 0.4%