CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

[
  {
    "vendor": "Tauri",
    "product": "tauri-plugin-updater",
    "collectionURL": "https://crates.io/crates/tauri-plugin-updater",
    "packageName": "tauri-plugin-updater",
    "repo": "git://github.com/tauri-apps/plugins-workspace",
    "programFiles": [
      "plugins/updater/src/updater.rs",
      "plugins/updater/src/config.rs"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.12.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.12.0",
        "lessThanOrEqual": "*",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]