wailsapp vulnerabilities

Products

• wails 1

Latest wailsapp CVEs

Newest publication first

1. CVE-2026-34157 Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

   Published 2026-11-05

   High·CVSS 7.6 EPSS 0.50%

   Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsAllowedOrigins in v2/internal/frontend/originvalidator/originValidator.go passes wildcard patterns to wildcardPatternToRegex, which expands every asterisk to an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.