crates.io/tauri-plugin-shell CVE-2025-31477: critical 9.8, EPSS 1.04%
Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`
Action: Upgrade tauri-plugin-shell to 2.2.1 or later.
cargo update -p tauri-plugin-shell --precise 2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-c9pr-q8gx-3mgp
- nvd: CVE-2025-31477
- https://github.com/tauri-apps/plugins-workspace/security/advisories/GHSA-c9pr-q8gx-3mgp
- https://github.com/tauri-apps/plugins-workspace/commit/9cf0390a52497e273db1a1b613a0e26827aa327c
- https://github.com/tauri-apps/plugins-workspace
CVE-2025-31477 · published · modified · JSON