crates.io tauri-plugin-shell vulnerabilities

Latest crates.io tauri-plugin-shell CVEs

Newest publication first

1. CVE-2025-31477 Improper Scope Validation in the open Endpoint of tauri-plugin-shell

   Published 2025-04-02

   Critical·CVSS 9.3 EPSS 1.0%

   The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open o...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.