JFrog Security Research

Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains

Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds

Pake arbitrary file write via unsanitized download_file filename

NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects