tauri-apps

Products

ProductCVEsExploitedLatest
tauri8–May 27, 2026
plugins-workspace1–Apr 2, 2025

Exploited and recent CVEs

  • CVE-2026-42184 Medium 6.1 Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands 0.3%
  • CVE-2025-31477 Critical 9.3 Improper Scope Validation in the open Endpoint of tauri-plugin-shell 1.0%
  • CVE-2024-35222 Medium 5.9 iFrames Bypass Origin Checks for Tauri API Access Control 0.3%
  • CVE-2023-46115 High 8.4 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli 0.2%
  • CVE-2023-34460 Medium 4.8 Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles 0.6%
  • CVE-2023-31134 Medium 4.8 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites 0.5%
  • CVE-2022-46171 Medium 6.8 Tauri vulnerable to path traversal 1.1%
  • CVE-2022-41874 Low 2.6 Tauri Filesystem Scope can be Partially Bypassed 0.5%
  • CVE-2022-39215 High 8.3 The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri 1.0%