Vulnerabilities in tauri-apps

9 results

Vexday analysis

A Tauri Apps acumula 9 vulnerabilidades catalogadas, com 1 classificada como crítica, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é path traversal (CWE-22), padrão em bibliotecas de manipulação de arquivos; o risco recente é baixo com apenas 1 CVE publicada nos últimos 90 dias. O perfil sugere vulnerabilidades de maturação lenta, recomendando monitoramento contínuo mas sem urgência de resposta imediata.

CVE-2022-46171MEDIUMTauri vulnerable to path traversalEPSS 1.0%CVE-2025-31477CRITICALImproper Scope Validation in the open Endpoint of tauri-plugin-shellEPSS 1.0%CVE-2022-39215HIGHThe readDir Endpoint Scope can be Bypassed With Symbolic Links in TauriEPSS 0.8%CVE-2023-34460MEDIUMTauri vulnerable to Regression on Filesystem Scope Checks for DotfilesEPSS 0.6%CVE-2023-31134MEDIUMTauri Open Redirect Vulnerability Possibly Exposes IPC to External SitesEPSS 0.5%CVE-2022-41874LOWTauri Filesystem Scope can be Partially BypassedEPSS 0.4%CVE-2024-35222MEDIUMiFrames Bypass Origin Checks for Tauri API Access ControlEPSS 0.3%CVE-2026-42184MEDIUMTauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC CommandsEPSS 0.3%CVE-2023-46115HIGHUpdater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cliEPSS 0.2%