Pake vulnerabilities

2 known vulnerabilities in Pake from Tw93. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Pake: Missing Authorization

  CVE-2026-96454Sep 23, 2026Tw93

  Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/defaul

• 8.8 High severity

  Pake: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-82635Aug 30, 2026Tw93

  Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences (for example ../Library/LaunchAgents/com.evil.plist) or an ab