Rust advisories / crate
Security history · tauri · data from Oct 24, 2026
Is tauri safe to use? Its security history
VerdictNo open advisories. 13 past vulnerabilities were fixed; use 1.1.2 or newer to be clear of all of them.
Every advisory, newest first
- VulnerabilityGHSA-7gmj-67g7-phm9 · 2026-05-06Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands
- VulnerabilityGHSA-57fm-592m-34r7 · 2024-05-23iFrames Bypass Origin Checks for Tauri API Access Control
- VulnerabilityGHSA-57fm-592m-34r7 · 2024-05-23iFrames Bypass Origin Checks for Tauri API Access Control
- VulnerabilityGHSA-wmff-grcw-jcfm · 2023-06-21Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
- VulnerabilityGHSA-4wm2-cwcf-wwvp · 2023-05-03Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
- VulnerabilityGHSA-4wm2-cwcf-wwvp · 2023-05-03Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
- VulnerabilityGHSA-4wm2-cwcf-wwvp · 2023-05-03Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
- VulnerabilityGHSA-6mv3-wm7j-h4w5 · 2022-12-22Tauri Filesystem Scope Glob Pattern is too Permissive
- VulnerabilityGHSA-6mv3-wm7j-h4w5 · 2022-12-22Tauri Filesystem Scope Glob Pattern is too Permissive
- VulnerabilityGHSA-6mv3-wm7j-h4w5 · 2022-12-22Tauri Filesystem Scope Glob Pattern is too Permissive
- VulnerabilityGHSA-6mv3-wm7j-h4w5 · 2022-12-22Tauri Filesystem Scope Glob Pattern is too Permissive
- Vulnerability LowRUSTSEC-2022-0091 · 2022-09-19`tauri` filesystem scope partial bypass
- Vulnerability MediumRUSTSEC-2022-0088 · 2022-08-07`tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope
Check your version
Run cargo tree -i tauri to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?