tauri — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in tauri, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-95626	Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains CWE-79	8.3	High	2026-09-23
CVE-2026-42184	Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands CWE-918	-	-	2026-05-27
CVE-2024-35222	iFrames Bypass Origin Checks for Tauri API Access Control CWE-284	5.9	Medium	2024-05-23
CVE-2023-46115	Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli CWE-200	8.4	High	2023-10-19
CVE-2023-34460	Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles CWE-285	4.8	Medium	2023-06-23
CVE-2023-31134	Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites CWE-601	4.8	Medium	2023-05-09
CVE-2022-46171	Tauri vulnerable to path traversal CWE-22	6.8	Medium	2022-12-23
CVE-2022-41874	Tauri Filesystem Scope can be Partially Bypassed CWE-668	2.6	Low	2022-11-10
CVE-2022-39215	The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri CWE-22	8.3	High	2022-09-15

All 9 known CVE vulnerabilities affecting tauri with full Chinese analysis, references, and POCs where available.