MEDIUM5.8crates.io
GHSA-28m8-9j7v-x499· CVE-2022-39215, RUSTSEC-2022-0088Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links
Modified: 11/8/2023
package
pkg:crates.io/tauri
Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links
Modified: 11/8/2023
Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
Modified: 9/10/2026
iFrames Bypass Origin Checks for Tauri API Access Control
Modified: 5/23/2024
Tauri Filesystem Scope Glob Pattern is too Permissive
Modified: 11/8/2023
Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands
Modified: 6/8/2026
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
Modified: 9/10/2026
`tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope
Modified: 11/8/2023
`tauri` filesystem scope partial bypass
Modified: 11/8/2023