Tauri has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was September 2026 with 5. The median CVSS is 6.8 (medium). None have a confirmed exploitation report. Most affected products: tauri-plugin-updater (2), tauri (1), tauri-plugin-dialog (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Products
- tauri-plugin-updater 2
- tauri 1
- tauri-plugin-dialog 1
- tauri-plugin-http 1
Worst active — by depth score
CVE-2026-95626High· 8.3Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive46CVE-2026-95627High· 7.7When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single use…42CVE-2026-95624Medium· 6.8The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code37CVE-2026-95625Medium· 5.9The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes32CVE-2026-95623Medium· 5.6The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request31
Tauri vulnerabilities
CVEs affecting Tauri, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-95627High· 7.7When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single use…
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single use…
CVE-2026-95626High· 8.3Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, th…
CVE-2026-95625Medium· 5.9The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS…
CVE-2026-95624Medium· 6.8The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code
The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be diffe…
CVE-2026-95623Medium· 5.6The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request
The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally wit…