tauri-plugin-updater

2 known vulnerabilities in tauri-plugin-updater, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-95625 CVSS 5.9 medium The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The…
CVE-2026-95624 CVSS 6.8 medium The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When…