localapp (>=0.1.0 <=0.1.1) potentially affected by CVE-2023-46115 via tauri-cli (=1.1.1)

tauri-cli CARGO version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tauri-cli and may be impacted: - localapp =0.1.0, =0.1.1 Source cves: CVE-2023-46115 Source advisory: OSV:GHSA-2RCP-JVR4-R259...

Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables

Impact This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key password into bundled Tauri applications using the Vite frontend in a specific configuration. The Tauri...

CVE-2023-46115 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli

Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key password into bundled Tauri applications...