{"action":"Upgrade tauri to 1.0.6 or later.","affected":[{"fixed":"1.0.6","introduced":"0"}],"component":"tauri","cve_ids":["CVE-2022-39215"],"ecosystem":"crates.io","epss":0.01022,"exploited":false,"fixed_versions":["1.0.6"],"ghsa_id":"GHSA-28m8-9j7v-x499","id":"tcs_01M5KER2K43P86VNJ6FZYPJQEG","modified_at":"2023-11-08T04:10:15.123159Z","published_at":"2022-09-16T19:28:49Z","references":["https://osv.dev/vulnerability/GHSA-28m8-9j7v-x499","https://github.com/tauri-apps/tauri/security/advisories/GHSA-28m8-9j7v-x499","https://nvd.nist.gov/vuln/detail/CVE-2022-39215","https://github.com/tauri-apps/tauri/issues/4882","https://github.com/tauri-apps/tauri/pull/5123","https://github.com/tauri-apps/tauri/pull/5123/commits/1f9b9e8d26a2c915390323e161020bcb36d44678","https://github.com/tauri-apps/tauri/commit/bb178829086e80916f9be190f02d83bc25802799","https://github.com/tauri-apps/tauri","https://github.com/tauri-apps/tauri/releases/tag/tauri-v1.0.6","https://rustsec.org/advisories/RUSTSEC-2022-0088.html"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-28m8-9j7v-x499","url":"https://osv.dev/vulnerability/GHSA-28m8-9j7v-x499"}],"summary":"Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links"}