1 matches found
Improper Verification of Cryptographic Signature
Overview @tauri-apps/plugin-updater is a Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the verifysignature function in updater.rs, which does not validate that the version embedded in the signature's trusted comment matches the version...
7.4CVSS5.8AI score0.00156EPSS
SaveExploits0References2
20