tauri-apps — Vulnerabilities & Security Advisories 9

Tauri-apps develops a framework for building lightweight, cross-platform desktop applications using web technologies. Historically, the project has faced vulnerabilities including remote code execution through unsafe deserialization, cross-site scripting in webview components, and privilege escalation via improper input validation. Security characteristics include Rust-based backend code and sandboxed webviews, though the project has experienced incidents where insufficient input sanitization led to arbitrary code execution in specific versions. The eight recorded CVEs primarily stem from improper handling of external inputs and webview security boundaries, emphasizing the need for careful implementation of its hybrid architecture.