CVE-2023-34460
1 advisory.
crates.io/tauri CVE-2023-34460: medium 4.8, EPSS 0.65%
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
Action: Upgrade tauri to 1.4.1 or later.
cargo update -p tauri --precise 1.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.4.1 | - |
Fixed versions
| 1.4.1 |
Sources
- osv: GHSA-wmff-grcw-jcfm
- https://github.com/tauri-apps/tauri/security/advisories/GHSA-6mv3-wm7j-h4w5
- https://github.com/tauri-apps/tauri/security/advisories/GHSA-wmff-grcw-jcfm
- https://nvd.nist.gov/vuln/detail/CVE-2023-34460
- https://github.com/tauri-apps/tauri/pull/6969#discussion_r1232018347
- https://github.com/tauri-apps/tauri/pull/7227
- https://github.com/tauri-apps/tauri/commit/066c09a6ea06f42f550d090715e06beb65cd5564
- https://github.com/tauri-apps/tauri
CVE-2023-34460 · published · modified · JSON