Tauri-apps vulnerabilities
We track 4 vulnerabilities in Tauri-apps products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
Latest Tauri-apps vulnerabilities
- 8.8 High severity
tauri: Server-Side Request Forgery
Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's is_local_url() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri map
- 9.8 Critical severity
The Tauri shell plugin allows access to the system shell.
The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system ope
- 9.8 Critical severity
tauri: Improper Authorization
Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes (eg. `$HOME/*`),
- 7.7 High severity
tauri: Improper Limitation of a Pathname to a Restricted Directory
Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `?`, and `[...]` match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Sco