Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2023-34460

Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Description

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes (eg. `$HOME/*`), but a regression was introduced when a configuration option for this behavior was implemented. Only Tauri applications using wildcard scopes in the `fs` endpoint are affected. The regression has been patched on version 1.4.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tauri-apps tauri

  • = 1.4.0affected

References