{"action":"Upgrade tauri-plugin-shell to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"tauri-plugin-shell","cve_ids":["CVE-2025-31477"],"ecosystem":"crates.io","epss":0.01039,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-c9pr-q8gx-3mgp","id":"tcs_01M5KEWVCN4E78DTV4KGE2AC65","modified_at":"2026-09-10T03:50:23.724505067Z","published_at":"2025-04-02T22:36:45Z","references":["https://osv.dev/vulnerability/GHSA-c9pr-q8gx-3mgp","https://github.com/tauri-apps/plugins-workspace/security/advisories/GHSA-c9pr-q8gx-3mgp","https://nvd.nist.gov/vuln/detail/CVE-2025-31477","https://github.com/tauri-apps/plugins-workspace/commit/9cf0390a52497e273db1a1b613a0e26827aa327c","https://github.com/tauri-apps/plugins-workspace"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-c9pr-q8gx-3mgp","url":"https://osv.dev/vulnerability/GHSA-c9pr-q8gx-3mgp"},{"source":"nvd","source_id":"CVE-2025-31477","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31477"}],"summary":"Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`"}