Tauri records
9 published records for vendor tauri.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-668 Exposure of Resource to Wrong Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-34460No exploit | Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfilestauri · tauri · CWE-285 | Critical9.8 | — | 0.6% | Jun 23, 2023 |
37Monitor | CVE-2025-31477No exploit | Improper Scope Validation in the open Endpoint of tauri-plugin-shelltauri · plugin-shell · CWE-20 | Critical9.3 | — | 1.0% | Apr 2, 2025 |
30Monitor | CVE-2022-46171No exploit | Tauri vulnerable to path traversaltauri · tauri · CWE-22 | High7.7 | — | 1.0% | Dec 23, 2022 |
24Monitor | CVE-2026-42184No exploit | Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commandstauri · tauri · CWE-918 | Medium6.1 | — | 0.4% | May 27, 2026 |
23Monitor | CVE-2022-39215No exploit | The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauritauri · tauri · CWE-22 | Medium5.8 | — | 1.0% | Sep 15, 2022 |
23Monitor | CVE-2024-35222No exploit | iFrames Bypass Origin Checks for Tauri API Access Controltauri-apps · tauri · CWE-284 | Medium5.9 | — | 0.3% | May 23, 2024 |
22Monitor | CVE-2023-46115No exploit | Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-clitauri · tauri · CWE-200 | Medium5.5 | — | 0.2% | Oct 19, 2023 |
21Monitor | CVE-2023-31134No exploit | Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sitestauri · tauri · CWE-601 | Medium5.4 | — | 0.5% | May 9, 2023 |
18Monitor | CVE-2022-41874No exploit | Tauri Filesystem Scope can be Partially Bypassedtauri · tauri · CWE-668 | Medium4.7 | — | 0.4% | Nov 10, 2022 |
- CVE-2023-3446039Monitor
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
CriticalCVSS 9.8No exploitEPSS 1%tauri · tauriJun 23, 2023
- CVE-2025-3147737Monitor
Improper Scope Validation in the open Endpoint of tauri-plugin-shell
CriticalCVSS 9.3No exploitEPSS 1%tauri · plugin-shellApr 2, 2025
- CVE-2022-4617130Monitor
Tauri vulnerable to path traversal
HighCVSS 7.7No exploitEPSS 1%tauri · tauriDec 23, 2022
- CVE-2026-4218424Monitor
Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands
MediumCVSS 6.1No exploitEPSS 0%tauri · tauriMay 27, 2026
- CVE-2022-3921523Monitor
The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri
MediumCVSS 5.8No exploitEPSS 1%tauri · tauriSep 15, 2022
- CVE-2024-3522223Monitor
iFrames Bypass Origin Checks for Tauri API Access Control
MediumCVSS 5.9No exploitEPSS 0%tauri-apps · tauriMay 23, 2024
- CVE-2023-4611522Monitor
Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli
MediumCVSS 5.5No exploitEPSS 0%tauri · tauriOct 19, 2023
- CVE-2023-3113421Monitor
Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
MediumCVSS 5.4No exploitEPSS 1%tauri · tauriMay 9, 2023
- CVE-2022-4187418Monitor
Tauri Filesystem Scope can be Partially Bypassed
MediumCVSS 4.7No exploitEPSS 0%tauri · tauriNov 10, 2022