CyberSecBulletin

Tw93 vulnerabilities

We track 2 vulnerabilities in Tw93 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.

2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score

Latest Tw93 vulnerabilities

  • 8.2 High severity

    Pake: Missing Authorization

    CVE-2026-96454Tw93

    Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/defaul

  • 8.8 High severity

    Pake: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-82635Tw93

    Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences (for example ../Library/LaunchAgents/com.evil.plist) or an ab