CVE-2022-46171
1 advisory.
crates.io/tauri CVE-2022-46171: medium 6.8, EPSS 1.07%
Tauri Filesystem Scope Glob Pattern is too Permissive
Action: Upgrade tauri to 1.0.8 or later.
cargo update -p tauri --precise 1.0.8cargo update -p tauri --precise 1.1.3cargo update -p tauri --precise 1.2.3cargo update -p tauri --precise 2.0.0-alpha.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.8 | - |
| 1.1.0 | 1.1.3 | - |
| 1.2.0 | 1.2.3 | - |
| 2.0.0-alpha.0 | 2.0.0-alpha.2 | - |
Fixed versions
| 1.0.8 | 1.1.3 | 1.2.3 | 2.0.0-alpha.2 |
Sources
- osv: GHSA-6mv3-wm7j-h4w5
- https://github.com/tauri-apps/tauri/security/advisories/GHSA-6mv3-wm7j-h4w5
- https://nvd.nist.gov/vuln/detail/CVE-2022-46171
- https://github.com/tauri-apps/tauri/commit/14d567f7ecb25a6d1024cf3d796f86aee89d0dd4
- https://github.com/tauri-apps/tauri/commit/72389b00d7b495ffd7750eb1e75a3b8537d07cf3
- https://github.com/tauri-apps/tauri/commit/f0602e7c294245ab6ef6fbf2a976ef398340ef58
- https://github.com/tauri-apps/tauri
CVE-2022-46171 · published · modified · JSON