tauri-plugin-http vulnerabilities

CVEs whose affected-version data names the tauri-plugin-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-95623Medium· 5.6

today

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally wit…

▾ SunlitTauri · tauri-plugin-httpvia NVD