Tauri Tauri-Plugin-Updater
2 CVEs affecting Tauri Tauri-Plugin-Updater. Latest disclosed: 2026-09-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-95624 | Medium | 6.8 | 2026-09-22 | The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replac… |
CVE-2026-95625 | Medium | 5.9 | 2026-09-23 | The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which c… |