Advisories · Technology

tauri-plugin-updater.

Every CVE that names tauri-plugin-updater among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-95625 CVE record

CVSS 5.9 Medium

Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade
- tauri-plugin-updater
- CWE-354
Not analysed yet 23 Sept 2026
CVE-2026-95624 CVE record

CVSS 6.8 Medium

Tauri framework v2 malicious downgrade via allow_downgrades from frontend code
- tauri-plugin-updater
- Broken access control
Not analysed yet 22 Sept 2026