{"action":"Upgrade tauri to 1.0.6 or later.","affected":[{"fixed":"1.0.6","introduced":"0.0.0-0"}],"component":"tauri","cve_ids":["CVE-2022-39215"],"ecosystem":"crates.io","epss":0.01022,"exploited":false,"fixed_versions":["1.0.6"],"ghsa_id":"GHSA-28m8-9j7v-x499","id":"tcs_01M5KF852TGKGD3NV1YXBP6V6Q","modified_at":"2023-11-08T04:10:15.123159Z","published_at":"2022-08-07T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0088","https://crates.io/crates/tauri","https://rustsec.org/advisories/RUSTSEC-2022-0088.html","https://github.com/tauri-apps/tauri/issues/4882"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0088","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0088"}],"summary":"`tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope"}