What’s Vulnerable › Products

tauri-plugin-updater vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your tauri-plugin-updater version is affected

Latest tauri-plugin-updater vulnerabilities

• CVE-2026-95625 — Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade (CVSS 5.9)
• CVE-2026-95624 — Tauri framework v2 malicious downgrade via allow_downgrades from frontend code (CVSS 6.8)