tauri-plugin-dialog vulnerabilities

CVEs whose affected-version data names the tauri-plugin-dialog package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-95627High· 7.7

yesterday

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single use…

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single use…

▾ TwilightTauri · tauri-plugin-dialogEPSS 0.34%via NVD