Skip to main content
← crates.io

tauri-plugin-updater

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
crates.io

Advisories 2

  • CVE-2026-95625Medium 5.9

    Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

    Affected: from 2.0.0, fixed in 2.12.0; from 2.12.0.

  • CVE-2026-95624Medium 6.8

    Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

    Affected: from 2.8.0, fixed in 2.12.0.