Tauri tauri-plugin-updater vulnerabilities

2 published CVEs name Tauri tauri-plugin-updater among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 0Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-95625
Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade
Tauri · tauri-plugin-updater
Medium5.9
CVE-2026-95624
Tauri framework v2 malicious downgrade via allow_downgrades from frontend code
Tauri · tauri-plugin-updater
Medium6.8

Most common weaknesses